Analysis
| Category | Package | Started | Completed | Duration | Options | Log(s) |
|---|---|---|---|---|---|---|
| FILE | exe | 2025-06-12 11:15:17 | 2025-06-12 11:46:08 | 1851 seconds | Show Options | Show Analysis Log |
procmemdump=1
import_reconstruction=1
unpacker=2
norefer=1
no-iat=1
2024-11-25 13:37:15,459 [root] INFO: Date set to: 20250611T17:22:19, timeout set to: 1800 2025-06-11 18:22:19,711 [root] DEBUG: Starting analyzer from: C:\tmp_gell1p8 2025-06-11 18:22:19,711 [root] DEBUG: Storing results at: C:\ugjpRu 2025-06-11 18:22:19,711 [root] DEBUG: Pipe server name: \\.\PIPE\IprPMTCJ 2025-06-11 18:22:19,711 [root] DEBUG: Python path: C:\Users\Packager\AppData\Local\Programs\Python\Python310-32 2025-06-11 18:22:19,711 [root] INFO: analysis running as an admin 2025-06-11 18:22:19,711 [root] INFO: analysis package specified: "exe" 2025-06-11 18:22:19,711 [root] DEBUG: importing analysis package module: "modules.packages.exe"... 2025-06-11 18:22:20,102 [root] DEBUG: imported analysis package "exe" 2025-06-11 18:22:20,102 [root] DEBUG: initializing analysis package "exe"... 2025-06-11 18:22:20,102 [lib.common.common] INFO: wrapping 2025-06-11 18:22:20,102 [lib.core.compound] INFO: C:\Users\Packager\AppData\Local\Temp already exists, skipping creation 2025-06-11 18:22:20,102 [root] DEBUG: New location of moved file: C:\Users\Packager\AppData\Local\Temp\WMPDMC.exe 2025-06-11 18:22:20,102 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL option 2025-06-11 18:22:20,102 [root] INFO: Analyzer: Package modules.packages.exe does not specify a DLL_64 option 2025-06-11 18:22:20,102 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader option 2025-06-11 18:22:20,102 [root] INFO: Analyzer: Package modules.packages.exe does not specify a loader_64 option 2025-06-11 18:22:20,289 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser" 2025-06-11 18:22:20,305 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig" 2025-06-11 18:22:20,336 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise" 2025-06-11 18:22:20,336 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human" 2025-06-11 18:22:20,352 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops' 2025-06-11 18:22:20,352 [lib.api.screenshot] ERROR: No module named 'PIL' 2025-06-11 18:22:20,352 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots" 2025-06-11 18:22:20,367 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump" 2025-06-11 18:22:20,367 [root] DEBUG: Initialized auxiliary module "Browser" 2025-06-11 18:22:20,367 [root] DEBUG: attempting to configure 'Browser' from data 2025-06-11 18:22:20,367 [root] DEBUG: module Browser does not support data configuration, ignoring 2025-06-11 18:22:20,367 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"... 2025-06-11 18:22:20,367 [root] DEBUG: Started auxiliary module modules.auxiliary.browser 2025-06-11 18:22:20,367 [root] DEBUG: Initialized auxiliary module "DigiSig" 2025-06-11 18:22:20,367 [root] DEBUG: attempting to configure 'DigiSig' from data 2025-06-11 18:22:20,367 [root] DEBUG: module DigiSig does not support data configuration, ignoring 2025-06-11 18:22:20,367 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"... 2025-06-11 18:22:20,367 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature 2025-06-11 18:22:20,649 [modules.auxiliary.digisig] DEBUG: File is not signed 2025-06-11 18:22:20,649 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json 2025-06-11 18:22:21,102 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig 2025-06-11 18:22:21,102 [root] DEBUG: Initialized auxiliary module "Disguise" 2025-06-11 18:22:21,102 [root] DEBUG: attempting to configure 'Disguise' from data 2025-06-11 18:22:21,102 [root] DEBUG: module Disguise does not support data configuration, ignoring 2025-06-11 18:22:21,102 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"... 2025-06-11 18:22:21,102 [modules.auxiliary.disguise] INFO: Disguising GUID to 40e3f50e-e3ad-428d-ac6c-32516ae967dc 2025-06-11 18:22:21,102 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise 2025-06-11 18:22:21,102 [root] DEBUG: Initialized auxiliary module "Human" 2025-06-11 18:22:21,102 [root] DEBUG: attempting to configure 'Human' from data 2025-06-11 18:22:21,102 [root] DEBUG: module Human does not support data configuration, ignoring 2025-06-11 18:22:21,102 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"... 2025-06-11 18:22:21,102 [root] DEBUG: Started auxiliary module modules.auxiliary.human 2025-06-11 18:22:21,102 [root] DEBUG: Initialized auxiliary module "Screenshots" 2025-06-11 18:22:21,102 [root] DEBUG: attempting to configure 'Screenshots' from data 2025-06-11 18:22:21,102 [root] DEBUG: module Screenshots does not support data configuration, ignoring 2025-06-11 18:22:21,102 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"... 2025-06-11 18:22:21,102 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled 2025-06-11 18:22:21,102 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots 2025-06-11 18:22:21,102 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets" 2025-06-11 18:22:21,102 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data 2025-06-11 18:22:21,102 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring 2025-06-11 18:22:21,102 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"... 2025-06-11 18:22:21,117 [modules.auxiliary.tlsdump] INFO: lsass.exe found, pid 696 2025-06-11 18:22:21,133 [lib.api.process] INFO: Monitor config for <Process 696 lsass.exe>: C:\tmp_gell1p8\dll\696.ini 2025-06-11 18:22:21,133 [lib.api.process] INFO: Option 'procmemdump' with value '1' sent to monitor 2025-06-11 18:22:21,133 [lib.api.process] INFO: Option 'import_reconstruction' with value '1' sent to monitor 2025-06-11 18:22:21,149 [lib.api.process] INFO: Option 'unpacker' with value '2' sent to monitor 2025-06-11 18:22:21,149 [lib.api.process] INFO: Option 'norefer' with value '1' sent to monitor 2025-06-11 18:22:21,149 [lib.api.process] INFO: Option 'no-iat' with value '1' sent to monitor 2025-06-11 18:22:21,149 [lib.api.process] INFO: Option 'tlsdump' with value '1' sent to monitor 2025-06-11 18:22:21,149 [lib.api.process] INFO: 64-bit DLL to inject is C:\tmp_gell1p8\dll\OfUZSPk.dll, loader C:\tmp_gell1p8\bin\pLbotWiq.exe 2025-06-11 18:22:21,227 [root] DEBUG: Loader: IAT patching disabled. 2025-06-11 18:22:21,227 [root] DEBUG: Loader: Injecting process 696 with C:\tmp_gell1p8\dll\OfUZSPk.dll. 2025-06-11 18:22:21,243 [root] DEBUG: 696: Python path set to 'C:\Users\Packager\AppData\Local\Programs\Python\Python310-32'. 2025-06-11 18:22:21,243 [root] INFO: Disabling sleep skipping. 2025-06-11 18:22:21,243 [root] DEBUG: 696: Full process memory dumps enabled. 2025-06-11 18:22:21,243 [root] DEBUG: 696: Import reconstruction of process dumps enabled. 2025-06-11 18:22:21,243 [root] DEBUG: 696: Active unpacking of payloads enabled 2025-06-11 18:22:21,243 [root] DEBUG: 696: CAPE debug - unrecognised key norefer. 2025-06-11 18:22:21,243 [root] DEBUG: 696: TLS secret dump mode enabled. 2025-06-11 18:22:21,258 [root] DEBUG: 696: InternalYaraScan: Scanning 0x00007FF84A790000, size 0x1f4542 2025-06-11 18:22:21,274 [root] DEBUG: 696: InternalYaraScan hit: RtlInsertInvertedFunctionTable 2025-06-11 18:22:21,274 [root] DEBUG: 696: RtlInsertInvertedFunctionTable 0x00007FF84A7A090E, LdrpInvertedFunctionTableSRWLock 0x00007FF84A8FB4F0 2025-06-11 18:22:21,274 [root] DEBUG: 696: Monitor initialised: 64-bit capemon loaded in process 696 at 0x00007FF8234D0000, thread 6024, image base 0x00007FF60D500000, stack from 0x0000008EFAA74000-0x0000008EFAA80000 2025-06-11 18:22:21,274 [root] DEBUG: 696: Commandline: C:\Windows\system32\lsass.exe 2025-06-11 18:22:21,290 [root] DEBUG: 696: Hooked 5 out of 5 functions 2025-06-11 18:22:21,290 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread. 2025-06-11 18:22:21,290 [root] DEBUG: Successfully injected DLL C:\tmp_gell1p8\dll\OfUZSPk.dll. 2025-06-11 18:22:21,290 [lib.api.process] INFO: Injected into 64-bit <Process 696 lsass.exe> 2025-06-11 18:22:21,290 [root] DEB <truncated>
Machine
| Name | Label | Manager | Started On | Shutdown On | Route |
|---|---|---|---|---|---|
| win10-2 | win10-2 | KVM | 2025-06-12 11:15:17 | 2025-06-12 11:45:49 | none |
File Details
| File Name |
WMPDMC.exe
|
|---|---|
| File Type | PE32+ executable (GUI) x86-64, for MS Windows |
| File Size | 1533952 bytes |
| MD5 | 7480c878a04b3ced7c2e13d98131b72a |
| SHA1 | 8fe69b3cfb5ef59c07f71ea954f1a150c6a6669a |
| SHA256 | fe6a7c6e23ff1ea7d297aeb0d2b4c5e6e39db31764a3afec31b4ca3f385e3fc8 [VT] [MWDB] [Bazaar] |
| SHA3-384 | 261e8b904fddb8a1f685c92a130fa016d290967cf0642de7f9678a1886b2fc3fa74907efa44fe41e22eeafa0b1cf358c |
| CRC32 | 52AA2AEA |
| TLSH | T10C659D19E3E884E5C16D9139C516874FE7B1BC012B6187CF62709A8E6F33AD19E39F21 |
| Ssdeep | 24576:vXPNtETuhimApEjvZmHAcBnw/jqY1vLqyi4yR5QuQmulrjGHVJZh/u:v/IT+iHpI2AcFed+yi7PQuQm2uHVU |
| PE | File Strings BinGraph Vba2Graph VirusTotal |
unless
macroBindings
l$ VWATAVAWH
H93tSH
pA^_^[]
@.data
fA9tM
D$hE3
9F/;e'
GdipGetImageHeight
SetGadgetFocusEx
SelectObject
7j+A1
Progress
Software\Microsoft\Windows\CurrentVersion\DUIScaling
D;L$4|
</WMPDMCScrollViewer>
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(268,2)"/>
hA_A^A]A\_^[]
WindowsCreateStringReference
XElementNavigateOut
D9u0uTA#
imageres.dll
MapGadgetPoints
equals
EZZZZ8&1Q/
qJSu1P
IsAppThemed
GetStartupInfoW
TouchSelect_ScrollViewer
T$8H;q
APPID
PA^_^][
x ATAUAWH
xjjppuh_
@__/u
f9<Ju
,c_6y
Alpha
WMPDMC_MESSAGE_UpdateDevicePlaylist
menubar
OverhangOffset
<element layout="flowlayout(0, 2, 0, 0)" width="146rp" height="52rp" minsize="size(146rp,52rp)" background="argb(0,0,0,0)">
UWAUH
>a35@
]669w
<button background="dtb(Button, 1, 3)"/>
|$ AUAVAWH
UnionRect
DirectUIHWND
T$PD;
<if id="atom(repeat_button)">
SmoothFillAnimation
D!d$(E3
unrecognized layout value
9N4tJ
5S5I{
u*9Q<|%
CCBaseCheckRadioButton
SetRectEmpty
:3*2?
h ;f6
@SVWAVH
A8}bu
IMAGE
@A_A\_
>5W7*n
PageLeft
WindowsCodecs.dll
<WMPDMCButtonHC content="sgraphic(269,2)"/>
SysAnimate32
GetThemeBackgroundExtent
L$xE3
CreateWindowExW
LargeIncrement
<WMPDMCButtonHC id="Atom(play_pause_button)" layout="flowlayout(0)" sheet="AVTEffects" accessible="true" active="mouse|keyboard" layoutpos="absolute" height="52rp" width="52rp" x="47rp" y="0rp" resid="play_pause_button" accdesc="resstr(145)" tooltip="true" accrole="pushbutton" accname="resstr(145)" background="argb(0,0,0,0)">
D!}/D!}3
<WMPDMCThumbHC content="sgraphic(301,2)"/>
|$0>w
SetCursor
RegSetValueExW
NotifyWinEvent
CreateXmlReader
Tracking
D$0D;
D;w@r
R/F\A
library
Selector
BTT63%-0ZXH
L$HE3
GdiGradientFill
<WMPDMCButtonHC content="sgraphic(283,2)"/>
TouchSwitch_ContentElement
contentalign
EH9GD
Expanded
CLSIDFromString
RadioButton
Lh#zD
)|$0D
<if mousewithin="true">
SymGetModuleInfo64
tsp=qpm
ARGB0<%d,%d,%d,%d>,ARGB1<%d,%d,%d,%d>,ARGB2<%d,%d,%d,%d>
Chart
@USVWATAVH
0A_A^A]A\_^[
H AVH
SetGadgetMessageFilter
device_icon
rf_custom
appworkspace
D9~ht
SetGadgetParent
~5PC}8M
].pLe
tPD8{$uJH
VWAVH
X_^[]
GdipCreateBitmapFromHICON
api-ms-win-shcore-scaling-l1-1-0.dll
unrecognized property
}(6;gO
D8o~toH
highlight
<WMPDMCButtonHC content="sgraphic(345,2)"/>
<element layout="flowlayout(0)" width="82rp" height="52rp" minsize="size(82rp,52rp)" background="argb(0,0,0,0)">
F$v6E
o\$PH
<WMPDMCThumbHC content="sgraphic(302,2)"/>
fD94Vu
]*!5(
+M:eM
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(309,2)"/>
Dialog
shellborderlayout
verticalflowlayout
Microsoft Corporation
LoadLibraryExW
%02.2I64d:%02.2I64d:%02.2I64d
memcmp
l6dYFQ
type="win32"
OutputDebugStringA
pA_A^A]_^[]
_XcptFilter
MaxLength
y':LXP
_lock
CombineRgn
T$HE3
HcD$0H
~ffffffffffff~
`A^_^][
?{Cx
ItemList
?t)nD)
6op.3/
MUTE_BUTTON
USVWATAUAVAWH
M?t<2A
ShadowIntensity
RichText
>} UD
sysmetric
FY}JN
0123456789
@SUVWAVH
UnmapViewOfFile
vD+~
\$HD;
CWMPDMCFrame
<WMPDMCButtonHC id="Atom(prev_button)" layout="flowlayout(0)" sheet="AVTEffects" accessible="true" active="mouse|keyboard" accdesc="resstr(143)" tooltip="true" height="29rp" width="53rp" resid="prev_button" accrole="pushbutton" padding="rect(0rp,2rp,0rp,0rp)" accname="resstr(150)" background="argb(0,0,0,0)">
]PtdE3
CtrlNotifySink
SysListView32
ClientToScreen
t$PI;
<ifgreaterequal custom="65">
fD9<ru
YBarVisibility
D$4A+
nineright
SECURITY
nineclient
FindStdColor
<if highcontrast="1">
LastDSConst
L$XL;
WindowActive
.$$)-7=DFGG^
<WMPDMCButtonHC accstate="0x00100000" contentalign="middlecenter"/>
AppID
_initterm
LcEo3
fD9,Bu
<WMPDMCButtonHC content="sgraphic(344,2)"/>
DelayLong
<Tts<XtS<tt
D+|$<D
90v&H
!]PE3
.idata$5
-=\FXM
u!H9}
L$TD+
LoadLibraryW
+'''$d
False
D9A@s@H
[P24:
Vertical
edgehighlightthickness
<WMPDMCButtonHC layout="flowlayout(0)" accessible="true" accrole="pushbutton" height="25rp" width="14rp" accdesc="resstr(147)" tooltip="true" active="mouse|keyboard" sheet="AVTEffects" accname="resstr(147)" resid="volume_button" accstate="0x00100000" id="atom(volume_button)" background="argb(0,0,0,0)"/>
2@c6`
Narrow
DisableTooltips
<element layout="flowlayout(0)" width="31rp" height="52rp" resid="space" minsize="size(31rp,52rp)" background="argb(0,0,0,0)"/>
CreateSolidBrush
StretchDIBits
ButtonClassAcceptsEnterKey
A9u0t?
K==2E
s_Vm7
|$pE3
Windows.Foundation.Uri
N8^so
UiaRaiseStructureChangedEvent
%}OT=E
Content Type
.pdata
u#D9R
wcschr
CwWWWS__Omm-UUUTUU
vd6\By{
f#sss
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(349,2)"/>
button
4)+777DDF@m
Panes
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATUS_NETWORK_CHANGED
Microsoft
T$0D+
dW/]$
e?ho=H
ArrowsAtBottom
ScrollPadding
rsYY\
uDH9APt>fD
PageTab
t'H.n
GdipDeleteGraphics
.didat$2
t$(H!t$
H9yPu
FillRect
0GLB,
SizeWE
t###,X
KeyWithin
Application
t$`I;
p}Esk
97v1H
f;D$`u
A^A\_
.?AVCAtlException@ATL@@
[+M"cN&
tspbrqn
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
D$XfD
.data$r$brc
FlyoutStyle
8A_A^A]A\_^][
?Tc6K
R(E1".
"-+p@
%hu:%f
c``Hc
3zr]n
TextGlowSize
TouchSwitch_Fillpart
Children
D$@H;FP}
c fD9a.
<WMPDMCElementHC content="sgraphic(372,2)"/>
{xR"}
PausedPlayback
f;D$8
ExtraLight
)d$`E
SetEvent
<WMPDMCButtonHC content="sgraphic(280,2)"/>
ShowKeyFocus
t$ WATAVH
AO)LI
L$XE3
H+CPH
SleepConditionVariableSRW
_exit
u9E99t4E
<element layout="borderlayout()" layoutpos="bottom">
RegisterClipboardFormatW
GetRoleTextW
0A^_^
Fa#;0
CompositedText
LFak6
<style resid="GenericButtonStyle">
CurrentToggleValue
}gfA;
9eeexy{
G(D9o,~
JSL71
|$ ATH
<WMPDMCButtonHC content="sgraphic(284,2)"/>
u0D95
Character
YScrollable
GradientInactiveCaption
m--x3
SymSetOptions
i>eF0
SetGadgetFlags
L9eXt
WMPDMC_MESSAGE_CONNECTING_TO_MEDIA_RENDERER
0A_A^A\_^
Pt<%d,%d>
SetWindowResizeFlag
L9'tU
HKEY_PERFORMANCE_DATA
<+777=D=K
ButtonDropDownGrid
WM_COMMAND
Statusbar
p WAVAWH
SHCreateItemFromParsingName
!]VS=
BorderColor
d,qIf>
ScrollBarHostElement
<WMPDMCButtonHC content="sgraphic(337,2)"/>
play_pause_button
<WMPDMCThumbHC content="sgraphic(318,2)"/>
L9aPA
<description>Windows Shell</description>
<button id="Atom(active_media_item_info_icon)" resid="active_media_item_info_icon" accessible="true" accrole="pushbutton" active="mouse|keyboard" accstate="0x00100000" sheet="GenericButtonStyle" layoutpos="none" margin="rect(0rp, 0rp, 6rp, 0rp)"/>
+\$X+]
Clock
WrapKeyboardNavigate
;\$<H
gridlayout
.tls$ZZZ
eooO9
CoCreateInstance
WM_CLOSE
wWwwwwwwu
ValueList<%d>
uR!D$DL
IsPressed
J ,5eh
7Pl8%^
HD,#2
TouchEdit_Button_PasswordReveal
H(8G@
ipu)A
Wa-P3
H;W0uJH
active_media_item_album_art_holder_border
WrapCenter
ultra_black
8]wu'L
L$PD;d$8
Sheet
<WMPDMCButtonHC content="sgraphic(263,2)"/>
pageright
+L$,H
GetScrollInfo
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(278,2)"/>
SymLoadModule64
D9g,~
)t$03
Unexpected
Accessible
next_button
MXfE9
D9`xu(H
u+HcC
{D1607DBC-E323-4be2-86A1-48A42A28441E}
D$@D!d$8A
ControlPanelStyle
WinStyle
%hu:%hu.%f/%f
<element layout="flowlayout(0)" width="8rp" height="52rp" resid="space" minsize="size(8rp,52rp)" background="argb(0,0,0,0)"/>
.CRT$XIA
GdipDisposeImage
+L$$D+t$ A
ModernProgressRing
Y%l8c8
RevokeDragDrop
(wo%-
I;D$
<stylesheets>
MFGetCallStackTracingWeakReference
73(G9>v
</WMPDMCElementHC>
|$(E3
DispatchMessageW
<if id="atom(stop_button)">
M;;sRH
hA_A^A]A\_^][
GetGadgetRect
MediumSlow
<WMPDMCElementHC layout="flowlayout(0)" height="52rp" width="52rp" resid="play_pause_glow_resource" id="atom(play_pause_glow_resource)" sheet="AVTEffects" background="argb(0,0,0,0)"/>
st\YTTTQOOJ
name="WMPDMC"
fD9l$htO
OpenEventW
v]w_g
+l$,H
<if keyfocused="false">
SnapIntervalX
t$D8{at
L9EPt8M
GetGadgetLayerInfo
D9l$l|C
DestroyIcon
DirectUI
uXD;w@
On='(`
ResetEvent
Toolbar
,%u,%u,%u)
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_RECORDING
x UAVAWH
{K96Iy
TickCount
LoadMenuW
D;\$<
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
\d,!!
@A__]
XA_A^A]A\_^][
D+D$@
DQ5#C
FileDescription
D$<+D$4;
B;(',
ERROR_OCCURRED
$E+R|)
\$ UVWH
L.E9f
t9fD9l$ht=
MJ W1
OS~A-
REPEAT_BUTTON
)|$@D
up},7[
L6{Ioo
~HwXX
TreatRightMouseButtonAsLeft
u(D9nXua
invalid sheet
CreateRectRgn
UWATAVAWH
D9}wt
<element layoutpos="none" contentalign="topleft" id="Atom(active_media_item_layout)" resid="active_media_item_layout" layout="borderlayout()" background="argb(0,0,0,0)" padding="rect(0rp, 6rp, 0rp, 6rp)">
TouchScrollBar
D+D$p
L!|$pH
A(!Q0H
Xul2"
Size<%d,%d>
ntdll.dll
TooltipMaximumLineCount
D8g$u
Button
sheet
{ L9o
PGKk3
10.0.17763.1
cJ!RP
uCD9R
vswprintf_s
padding
B5hTi2b`
InitializeCriticalSection
WakeAllConditionVariable
Software\Microsoft\DirectUI
win:Informational
UPHcE`Hk
A_A^A\_^
HKEY_DYN_DATA
SetWindowLongPtrW
Cr7,X&7
Direction
GetForegroundWindow
lkl8lklxlkl
D$TE3
UVWATAWH
fD9<~u
SetWindowLongW
lhOZs=
GdipCreateBitmapFromHBITMAP
<button foreground="graytext"/>
fD96A
<element layout="borderlayout()" layoutpos="left" background="argb(0,0,0,0)" padding="rect(2rp,0rp,8rp,0rp)">
Normal
cO(dK
ConstrainLayout
(t$PL
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(353,2)"/>
<if custom="false">
DUserFlushDeferredMessages
ActivityOccuring
Ce%ae%ae'
(|$@H
9)@q=V
u)!}HL;
CoWaitForMultipleHandles
<if id="atom(thumb)">
<if class="Line">
Unmatched tag, expected </duixml>
version="6.0.0.0"
D9uHt
AnimatePopupOnDismiss
|$lD+
9l$Ht
FALSE
Y>nnl
<element id="atom(connecting_animation_top)" resid="connecting_animation_top" contentalign="middlecenter" layoutpos="none" background="argb(0,0,0,0)"/>
T$(9U
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATUS_NO_NETWORK
HighContrast
D$(E3
MeFsssssFeM
Minimum
TraceEvent
j_/E7oS
IL$0A
AutoGrouping
D~u`"
CLSID
client
InternalRichText
object.item.videoItem
$,fA9
nD$0f
tAH9/u
0A_A^_^]
7of`p
D9>v'H
|$(xF
rf_vertical
)t$@H
K(''*
CreateDIBPatternBrushPt
EnumChildWindows
}rupukj`
GetTickCount64
<element padding="Rect(6rp,10rp,6rp,6rp)" layout="borderlayout()" layoutpos="client" resid="center" background="argb(0,0,0,0)">
SHCreateDataObject
Frameduration
pQt)S
<wmpdmcslider id="atom(slider)" layout="borderlayout()" layoutpos="absolute" x="16rp" y="8rp" width="64rp" height="13rp" accessible="true" active="mouse|keyboard" minimum="0" maximum="100" page="5" proportional="false" IsStatusBarStyle="true" JumpToClick="true" accrole="slider" accname="resstr(147)" sheet="volumeslider" background="argb(0,0,0,0)"/>
UWATH
{ 9{,~
pageleft
SetWindowOrgEx
D$$)C
CheckButton
memmove_s
AccDesc
uQ9|$tuKE
BaseScrollViewer
|$0A_A^A\
UVWAVAWH
GetSysColor
L$0E3
].-D%
D$4A9E0}
k8D9-
fc3~W
sD] 3
L$8H3
'K=3w
PREVIOUS_BUTTON
other
9y@r$
DrawFocusRect
WMPDMC_MESSAGE_INVALID
RemovePropW
WMPDMC MEDIA ITEM INDEX
themeable
GetGadgetAnimation
D$0@2
InflateRect
MaxMediaItems
<element id="Atom(seek_holder)" resid="seek_holder" layout="borderlayout()" layoutpos="top" direction="0" background="argb(0,0,0,0)" padding="rect(8rp,6rp,8rp,0rp)">
NHi>Z
UATAWH
A_A^A\_]
D$@A+
fA9.t
;vf7g
<element layout="borderlayout()" layoutpos="client" padding="rect(0rp,0rp,2rp,0rp)" background="argb(0,0,0,0)">
RadioButtonGlyph
7,@A2n
error_on_device_icon
1?RTH+
V7s-c
CheckedState
active_media_item_layout
<button contentalign="middlecenter | focusrect"/>
RoOriginateError
AllowAllScalingPlateaus
K^WK"
!|$pL
8T$1t8
TerminateProcess
Q<b1{
H;{ u
u8D9R
t)fD9 u#E
?<?t5
.#Y@6
H;A(t
f9,Au
StretchBlt
s4D9U
)t$ H
vTyGc
TCB_Label
Not all Elements were destroyed and can cause crashes later!
STOPPED
TouchSwitch_SignalText
UUZ-@F
SetPropW
GetStdColorBrushI
eHQW%
D8g$ueH
<WMPDMCButtonHC content="sgraphic(335,2)"/>
GetGadgetRootInfo
@\. v
DLNASourceURI
ItemHeight
Selected
ScrollBar
t`E8b
W@D9oXt
CompareStringW
A_A^A]
8N tf
<WMPDMCPlaylistButton background="themeable(dtb(EXPLORER::LISTVIEW, 1, 3), Highlight)"/>
Active
<WMPDMCButtonHC content="sgraphic(285,2)"/>
friendly_name_text
DUIXmlParser: Could not instantiate element
4$E97
For the object type, typecast each address to DirectUI::Element* in VS
<WMPDMCThumbHC content="sgraphic(300,2)"/>
DeleteAtom
TouchSelectPopup
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_PAUSED_RECORDING
object.item.imageItem
WM_ACTIVATE
TouchCommandButton_SubContent
DropList
TouchSelect_Label
L$0D+D$43
g:aEV
GdipDisposeImageAttributes
wVP6-
regular
StartEllipsis
tUM9~
0A^A\_
uqI9^X
inactive_media_item_layout
ActualReferencePoint
u:D9e
</element>
D$(+D$
E99tP
CloseThemeData
TouchSelectPopupHost
.text$x
cannot have scalable value
CreateMutexW
Client
T$ E3
tPD8o$uJH
<WMPDMCButtonHC layout="flowlayout(0)" accname="resstr(148)" accessible="true" accrole="pushbutton" custom="0" height="25rp" width="25rp" active="mouse|keyboard" id="atom(mute_button)" resid="mute_button" sheet="AVTEffects" accstate="0x00100000" accdesc="resstr(149)" tooltip="true" background="argb(0,0,0,0)"/>
t$4D;
o;xC75('$D
ColumnHeader
R,##,##,H
q$CHu
KillTimer
<element id="atom(Playlist_ListView)" layout="borderlayout()" layoutpos="client" accessible="true" accname="listview" accrole="list">
ExpandoButtonGlyph
dlna-playsingle:
<element layout="borderlayout()" layoutpos="top" id="atom(active_media_item_album_art_holder)" resid="active_media_item_album_art_holder" contentalign="middlecenter" background="argb(0,0,0,0)">
)|$pE
D$,E3
b.vvAN
WMP DND EXTERNAL FORMAT
.xdata$x
L$HH3
WATAWH
inactiveborder
A^_^
uf!L$`H
<button background="themeable(dtb(EXPLORER::LISTVIEW, 1, 2), Highlight)"/>
DialogElement
GetModuleHandleW
Segoe UI
Graphic
D8sbt
ThemeChanged
TouchCommandButton
D$PI;
Y#(%+R
.|RkU
play_pause_glyph_resource
CCBaseScrollBar
LLN2S
L$ E3
AeroWizardStyle
Repeater
<if id="atom(stop_glyph_resource)">
L36>Nbh(S
L9aPu
.CRT$XLZ
style
|DQAy`U
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(352,2)"/>
Layout
<button foreground="buttontext" accstate="0x00100000" contentalign="middlecenter" padding="rect(15rp,5rp,15rp,5rp)"/>
.giats
Unable to load graphics
<y\u=@
.rsrc
Microsoft.Windows.MediaFoundation.CallStack
]Plom
IS NOT
D$ H;
EndBufferedPaint
%I64d
ContextMenuBehavior
ImagehlpApiVersionEx
fD9<Fu
</if>
L H{G;
Hover
v$SK?
height
D+d$<
api-ms-win-core-winrt-error-l1-1-0.dll
XBarVisibility
</button>
RealizePalette
0A_A^_
ActivateActCtx
!|$(H
OriginalFilename
win:Start
inactive_media_item_playing_indicator
rqmJ}|y
Eo9E_u*D
CeY&]
MDTUO=
HorizontalScrollBar
9D$Pt
XA_A^_^[]
`f9)t[
uvD9~d
0A\_^
)D$ D
D$0f;
FileTimeToSystemTime
TextContentOverride
TzzzzzzzY-?[B
y%n~[
<WMPDMCThumbHC contentalign="middlecenter" accstate="0x00100000" content="sgraphic(319,2)"/>
ifgreater
)t$ I
WZZI
A!4$I
(|$`E
CCPushButton
TouchSlider_Buffering
PowerCreateRequest
AccName
uJ&-#/
CCRadioButton
TouchSelect_ItemList
fD94Au
BT{VlB
VWATH
I7!M]0vJ
D$,tBH
}hA8w
D$<9F
CreateCompatibleBitmap
VerySlow
SetTextAlign
HWNDHost
Bhhh`
3LoadIconWithScaleDown
;T$4r
rR)^_Q
0A_A^A\_^[]
x ATH
TouchXBaby
wwwwp
mhDkh
EnableWindow
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_NO_MEDIA_PRESENT
<WMPDMCThumbHC content="sgraphic(317,2)"/>
DUI_E_INVALIDPROPVALUE
Clipper
UVWATAUAVAWH
SmallDecrement
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
CreateStdAccessibleObject
Pointer
IL$xD
semi_bold
CloseHandle
FGGECC
};y:_J
prev_button
@A__^
0A^A]_
SizeAll
@.reloc
_vsnprintf
@USVWAUAVH
@SUWH
DisableContainerHwnd
HA_A^A]A\_^[]
0A_A^A]_^
.D$Xz#u!H
93v,H
UIAutomationCore.dll
width
v8tiE3
PjIzN
`fxb=
LoadResource
_purecall
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_TRANSITIONING
<WMPDMCButtonHC id="Atom(next_button)" layout="flowlayout(0)" sheet="AVTEffects" accessible="true" accdesc="resstr(142)" tooltip="true" active="mouse|keyboard" height="29rp" width="53rp" resid="next_button" accrole="pushbutton" padding="rect(0rp,2rp,0rp,0rp)" accname="resstr(151)" background="argb(0,0,0,0)">
SubContent
hA^_^[
GetSystemTimeAsFileTime
<if mousefocused="true">
DUIXmlParser: Failed to create layout
A^_]
IsIconic
D;d$Hr
_wtof
nGrr2,
H;yHr
dwmapi.dll
SnapIntervalY
L9l$hujH
ninebottomright
fD94xu
<element layout="borderlayout()" layoutpos="client" contentalign="middleleft" background="argb(0,0,0,0)">
(D$ f
RECORDING
D$0A;
Windows Media Player Digital Media Controller Application
Content
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(279,2)"/>
IsCharAlphaNumericW
4MIz6
35]%%#
captiontext
ocJ#-Q
1wevY
RegisterWindowMessageW
BPH;A
CharNextW
WMPDMC_MESSAGE_SetAvTransport_Async_Completed
Tyhmi)H
Tooltip
B011Aww7
QC<#t
SetUnhandledExceptionFilter
Kx 0
WMPDMC_MESSAGE_FAILED_CONNECTING_TO_MEDIA_RENDERER
Initializing
wcscmp
Gb[}6
HasShield
WMPDMC_MESSAGE_Op_Ex
inactive_media_item_title
?<?t:
WMPDMC_VOLUME_CHANGED
Overhang
LineLeft
Iff&qvv&~
u`I;w
}qffb
floor
ED$(H9
D$ E3
SWWG]]
.text
?333H
DeactivateActCtx
8\$`t
t<H;F(t63
;gk**l
<ifgreaterequal custom="30">
A;~@r
PA_A\_^]
floorf
BottomLeft
PLAYTO_LAUNCHUI
l$09_4
odaajdhhblllH
'(null)'
+\$|+]
WMPDMC_MESSAGE_TryPlaybackMultipleTimes
$b/7b'
inactive
ReleaseDetachedObjects
fE9,^u
w$H;q
a-n&
Xi+T}PG
<WMPDMCScrollViewer id="Atom(playlist_scroller)" resid="playlist_scroller" layoutpos="client" xbarvisibility="never" xscrollable="false" active="mouse" ybarvisibility="asneeded" yscrollable="true" sheet="WMPDMCScrollStyle">
Q<b1C
.rdata$brc
I*@LL4
SetWindowPos
1xg.3
DisableMouseInRectCheck
GetScaleFactorForMonitor
MiddleCenter
:".;'u3
xxxxxx
FontFace
WAUAVH
Shadow
L$`E3
Q G:)r
8F tv
+l$lD
x.L9}
A^A]_
<button background="dtb(Button, 1, 2)"/>
GetStdColorI
SemiLight
TooltipMaxWidth
x+L9}PA
{6FB2E74A-B8CB-40BB-93F3-FAC5F00FA203}
D9o0u
}0o?h
<SplitButton resid="mute_split_button" layout="flowlayout(0)" height="25rp" width="39rp" id="atom(mute_split_button)" background="argb(0,0,0,0)">
L9sXt
s WAVAWH
Local\Microsoft_WMPDMC_CheckForOtherInstanceMutex
SetGadgetFocus
4(*)~|
D;G,s)H
animations
_H^8x
v39](t!
LocalAlloc
t{fA;
.idata$4
---tuu
Unavail
music
PowerClearRequest
` AWH
+a!?oR
<element resid="device_icon_holder" layout="borderlayout()" layoutpos="left" background="argb(0,0,0,0)" margin="Rect(0rp,0rp,8rp,0rp)">
model_text
behaviors
A_A^_[]
D$(H9:u
+*"%#
A9h u
PA^_]
L$DA+
8$cY#
.rdata$T$brc
GetThreadLocale
<if keywithin="false">
UIASinkProvider
`A_A^A]A\_^[
x"8\$h
hz@CF0
__dllonexit
Component Categories
ARGB<%d,%d,%d,%d>
D8o$u7H
*t-fE9LR
unrecognized element
zL8o"
4)9*m
K$! -E@
NeHsxsxsIe5(
HandleEnterKey
0M9&unM
RegEnumKeyExW
fA9,Iu
StrFormatByteSizeW
<if selected="true">
PushButton
active_media_item_artist
E8H!}@H
$!2JYw
L$hD+
BT?TT
threedlightshadow
s4+k(+s,
IsStatusBarStyle
Mismatched </stylehseets> element
PLAYTO_DEVICE_PLAY
?s!fb!V
NOT_IMPLEMENTED
hh:mm:ss
B m@S
urn:upnp-org:serviceId:ContentDirectory
A+^ H
fD91t
MicrosoftTabletPenServiceProperty
f;D$(u/
Cursor
CCListView
H+FPI
ZoomMaximum
Mn0;n4
39;CE,
fo8\/y
CreateBitmap
&sSS3
K;7&l)
WMPDMC_MESSAGE_StartPlaybackOrStop
8fU6Zo
GetThemeFont
wHM;wPr
__C_specific_handler
m-@k5
@USVWAVAWH
A8^bu
<if keywithin="true">
{01CD0F29-DA4E-4157-897B-6275D50C4F11}
D}HE3
vM4#x
TraceMessage
\s!@"
[6o&}
<element foreground="themeable(black, highlightText)"/>
mm:ss
0A_A^A]A\_^]
t$ E;
GetSysColorBrush
@SUVWAUAVAWH
SetParent
GetGadgetFocus
-u9wlgg
RangeMin
TooltipStyle
TouchScrollBar_Track
x1L9ePu+A
MoveWindow
graphic
|$@E3
rgb(%u,%u,%u)
A<9<<:<A
LoadAcceleratorsW
;L$PvAH
fE9<nu
CreateEventW
d^f'#
|$ AVH
T$D+T$<H
DeleteObject
D$HfD
)|$PH
{RRRz222
.text$mn$00
t$ WH
A09CLu
EXD;0r
9O(v#
WMPDMC_MESSAGE_DISABLE_TRANSPORT_CONTROLS
,gfw8;
Unknown element
SetLastError
L$ D)O
FrameRect
<if id="atom(next_button)">
fA9,Su
.rsrc$01
t$,uQE;
AT?TT)
DebugBreak
GetGadgetVisual
#nPU8
v(99u
GetMessageExW
Window
demi_bold
Pages
Y@H9;u%L
D$DE3
6CWXX
MonitorFromRect
E9n@v4I
A_A^A]A\_^[]
ClearType
RegDeleteValueW
MenuFont;;;underline
UA\EO
UnknownState
<WMPDMCButtonHC content="sgraphic(334,2)"/>
WMPDMC_MESSAGE_DirectionBasedPlaybackAndRetry
TextGraphic
@8t$Qu
inactivecaption
L$hA;
OffsetRect
GetThemeAnimationTransform
{utsv
A_A^A]
ut9_8@
ReferencePoint
uO9T$`vIL
}SSS=
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(265,2)"/>
I;A8w%A
rf_linear
rqr rqr
AccValue
OLEACC.dll
<WMPDMCElementHC layout="flowlayout(0)" height="25rp" width="25rp" resid="repeat_glyph_resource" id="atom(repeat_glyph_resource)" sheet="AVTEffects" background="argb(0,0,0,0)"/>
menuhilight
fE9,Ou
%hu:%hu:%hu
L9\$(t
5 @(A
CreateActCtxW
CoTaskMemRealloc
H;EHt2
TypographyRuns
Unknown Fill Type
L$,+L$$
D8o|t
GdipCreateBitmapFromStream
MdFsssssGeM
tieqq_Ey
DUIXmlParser: style sheet reference not found
L[KKN{2
GetWindowRect
The root of our document should be <duixml>
GetCachedDWriteRenderTarget
^@H;^Hr
Windows.Media.Streaming.MediaRenderer
GetTraceEnableLevel
^+{s.
<WMPDMCButtonHC content="sgraphic(276,2)"/>
DUIXmlParser: Failed to create behavior
extra_bold
WMPDMCElementHC
%zf!$
D$<+L$4+D$t;
/ak$p
BufferedPaintUnInit
XEG`gl
_CxxThrowException
UsesDesktopPerMonitorScaling
\$0D;\$4u`D
xTEQp
IsWindow
InitializeSRWLock
SetGadgetBufferInfo
RepeatButton
HcGhH
LeaveCriticalSection
]GE)J
Foreground
ngg'=
TouchCommandButton_Content
?<?u1
VirtualQueryEx
ninetop
YOffset
;P,s(H
TranslateX
|$ AWH
L$ SVWH
GetTraceLoggerHandle
Software\Microsoft\Windows\CurrentVersion\Explorer\DUITouchScrollViewerTiling
Parent
v_cSs
RevokeScaleChangeNotifications
<button background="themeable(dtb(EXPLORER::LISTVIEW, 1, 5), Highlight)"/>
9Y4u+H
Pause
Eo9Eg
Microsoft Corporation. All rights reserved.
@sK#c
*n}'F
LargeDecrement
Shell IDList Array
L$PH3
%~pc5apc
<if custom="2">
RectangleV
u|I;~
D9oXt
|$X8T$Q
f9A`u
GetDateFormatW
?{uSH
Extent
InteractionMode
SizeNWSE
.text$yd
IsWindowVisible
Mismatched </style> in XML
CWMPDMCHost
GetWindowLongPtrW
?T?TT?
AliasedRendering
Eo9G(~
c\~U_J>
Transparent
captured
o>I&/y3
xMh`H
c~~EQ
WATAVH
comctl32.dll
GetThemeColor
O$CG2
<WMPDMCPlaylistButton accstate="0x00300000"/>
PA_A^_^]
LcA<E3
OffText
L$<+T$0+L$4H
HelpBalloon
@USVWAUAVAWH
W!o66
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(376,2)"/>
Wadvapi32.dll
9q0v-H
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_PLAYING
.lN'v
MouseWithin
UnknownElement
WM_DESTROY
D$dE3
(t$pH
RegisterDragDrop
FX9G4t/
ReleaseActCtx
api-ms-win-core-winrt-l1-1-0.dll
H WATAUAVAWH
@DpdzJ
Arrow
AcquireSRWLockExclusive
^(H;^(u
p8hlp
y.i t]
active_media_item_playing_indicator
SnapshotElement
foreground
borderthickness
WM_GETMINMAXINFO
Horizontal
+D$ +
Browser
Navigator
`A_A^A]A\_^]
8Zwgf
?6%'}bcR
l$ E3
]VkjeeO?
DLNAServerUDN
StrToInt64ExW
b+ty,
f6bWZ-
nineleft
M9~Ht;
MenuBar
CoDisconnectObject
NoPin
LegalCopyright
{T8@
D+d$4A
AccState
D8o$u
WMPDMC_MESSAGE_EXECUTE_NEXT_OP
NOOOn
GetBkMode
SendMessageTimeoutW
CallWindowProcW
photo
filllayout
DUIXmlParser: Failed to set value on element of class
DisableAccTextExtend
(|$0H
tPD8g$uJH
ATL$__a
GetLayout
ymH$$
buttonshadow
I9>ubI
GetTextExtentPointW
l*3qF
ARGB0<%d,%d,%d,%d>,ARGB1<%d,%d,%d,%d>
Enabled
,)9}8vTL
ninebottomleft
gtmar
AllowArrowOut
}4D9`
BuildAnimation
VirtualQuery
SetGadgetRect
CaptionFont;;;underline
MonitorFromWindow
version="1.0.0.0"
FjZ2j
[`OO|
windowtext
IaGsssssFaI
<element layout="borderlayout()" layoutpos="client" id="atom(active_media_item_album_art_holder_border)" resid="active_media_item_album_art_holder_border" contentalign="middlecenter">
<dependentAssembly>
A(;A,H
+D$0D
fD9d$`u
}|}?v
GetThemeAnimationProperty
invalid layout property
rowlayout
MaxTileSizeX
OPCOx
(D$ H
RowHeader
D$ D;
Use "dds 0xaddress L1" on x86 or "dqs 0xaddress L1" on x64
InitOnceExecuteOnce
arFO0y
ButtonFace
mshelp://windows/?id=079a4d8b-e19d-4d7f-bef1-116cb711364c
H UVWATAUAVAWH
\imagehlp.dll
D$HH;
@A_A^A]A\_^]
Root node should be 'duixml'
<WMPDMCButtonHC borderthickness="rect(2rp,0rp,0rp,0rp)" background="sgraphic(368,7)"/>
L$0H3
[ UVWH
DelayMedium
,UUU466
<element id="Atom(empty_text)" resid="empty_text" layout="flowlayout(1,2)" layoutpos="none" visible="false" background="argb(0,0,0,0)">
D;e0}
HeapDestroy
clipper
fD9<Bu
Typography
]HH!|$ L
.rdata$zzzdbg
Lb2a6
a5#"F
X%d;%d;%d;%s;%d
api-ms-win-core-path-l1-1-0.dll
h"B P
WMPDMC_MESSAGE_StartPlayback
IsChild
WMPDMC_MESSAGE_FUNC_EnsureImageTransitionTimer
l$XE3
LoadStringW
WAVAWH
A__^
GetKeyNameTextW
VdE^%
3/:.N4?
SRN{NMJ
<if enabled="false">
)|$`H
realloc
.rdata
<style resid="WMPDMCScrollStyle">
inactive_media_transition_animation
FontSize
1/zNj
H9_Pu
??1type_info@@UEAA@XZ
Unset
SizeNESW
vaH9\
Windows.Media.Streaming.DeviceController
tIHcJ
Medium
Xb{tfV
WrappingList
RegDeleteKeyW
!|$(H!|$ E3
q(rM?
E;T9dr
iz5dO
SHCreateShellItemArrayFromDataObject
menutext
A_A^_^[]
<WMPDMCButtonHC contentalign="middlecenter|focusrect"/>
-Nz?-2
P($333
CCTrackBar
2=!`v
9O4t2
Desktop
!02$:
L9IHth
~_1>A
wcsstr
eW2U.i
L$ WH
AG:[o
D$$I;
rOo5X
6Q(iH
D9o0ucH
<assemblyIdentity
CCC-~
WM_WINDOWPOSCHANGED
GetClassLongW
NLIIG=X
U1i8_D
x AWH
fD9,Au
seek_background
<WMPDMCElementHC layout="flowlayout(0)" height="25rp" width="53rp" resid="prev_glyph_resource" id="atom(prev_glyph_resource)" sheet="AVTEffects" background="argb(0,0,0,0)"/>
ImageList_Create
IsShowOnOffFeedback
SetLayout
windows.media.streaming.dll
x1L9}
GdiplusStartup
ZoomMinimum
y}}{uvss\TZPM
]@D8h
UiaRaiseAutomationPropertyChangedEvent
CoGetApartmentType
Narrowest
ReleaseStgMedium
WaitForSingleObject
<element accessible="true" accrole="graphic" accname="resstr(166)" contentalign="middlecenter" layoutpos="left" visible="false" width="5rp" height="5rp" content="sgraphic(299,2,-1,0,0,1,1)" id="atom(active_media_item_playing_indicator)" resid="active_media_item_playing_indicator" background="argb(0,0,0,0)"/>
<WMPDMCLabel id="Atom(model_text)" content=" " contentalign="middleleft|endellipsis" active="mouse" accessible="true" accrole="statictext" layoutpos="top" height="16rp" resid="model_text" foreground="graytext" background="argb(0,0,0,0)" margin="Rect(0rp,4rp,0rp,0rp)"/>
WMPDMC_MESSAGE_PLAYLIST_MAX_EXCEEDED
T$pA+
SetPixel
</stylesheets>
TTBL8
<WMPDMCElementHC layout="flowlayout(0)" height="25rp" width="25rp" resid="stop_glyph_resource" id="atom(stop_glyph_resource)" sheet="AVTEffects" background="argb(0,0,0,0)"/>
3\u]3w
<ToString Unavailable>
Playing
\$8I;
WM_MOVE
lstrlenW
J#-lp
qsort
L$ UVWATAUAVAWH
)D$4D+
b+$qj
WrapLeft
MediumFast
D9{l~
t^H!X
GetClassInfoExW
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
@A_A^]
nwjee
GetModuleFileNameA
0A^A]A\_^
PA_A^A\_^[]
PowerSetRequest
`VVTTQ
J@eQYB
SystemParametersInfoW
Z:_|!%
<button layoutpos="none"/>
SVWATAUAVAWH
0A_A^A\
wwwwwp
FindResourceExW
normal
</iflesser>
audio
9q@v-H
Ui+BU
4\ntdll.dll
Windows.Foundation.Collections.IVector`1<String>
inncdd
resbmp
BX9A4t
memcpy
thumb
SetForegroundWindow
.idata$3
XA_A^A]A\_^[]
MaxTileSizeY
WMPDMC_MESSAGE_UPDATE_SEEK_BAR
H!\$0H
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_PAUSED_PLAYBACK
TUe||<
WindowsIsStringEmpty
<if highcontrast="2">
FFFfc
cCdiouxXeEfgGnpsS
%I64u
ninebottom
<if custom="-1">
H!K H
1{hFn-
x#f9k
GetValueScaling
uQD9B
DUserFlushMessages
.didat$5
\$8H;
xRM9D$Pt
ea.qr
SetErrorMode
H!\$ H
1FFFx
v$Iz@
UNLOADED
DUI_E_NOTFOUND
sb_setkeyfocus
GetBrushOrgEx
lklxlkl8
D+d$,D
OiHzzzzz4
~J)DK
9y0r$
Microsoft.Windows.WMP.WMPDMC
A^A\_^[]
<WMPDMCThumbHC contentalign="middlecenter" accstate="0x00100000" content="sgraphic(367,2)"/>
Failed to read value for attrib
SetBrushOrgEx
jz=bj
TF=;:7S
LookupGadgetTicket
D$HA;
L$09L$4ufH
LineDown
resid
|$HfD
f93t+L
u)L9I8t
`~933
lQgkN
ss20=1,kern=1,dlig=1
@A_A^A]_^[]
)D$ H
zsTTZ
movie
ressheet
mZpM3
t$|H;
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(350,2)"/>
L$`9L$Pu
+D$X+E
AccessibleObjectFromWindow
pDfzv
fD9$Zu
dli;
L9?uYH
(_^][
)|$0I
LEVL@
7ndrr
<WMPDMCPlaylistButton contentalign="focusrect" background="themeable(dtb(EXPLORER::LISTVIEW, 1, 6), Highlight)"/>
__setusermatherr
Position
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATE_STOPPED
L9eXu:A
UATAUAVAWH
<if custom="true">
BeginBufferedPaint
GetThemeAppProperties
:q;]8
GetRgnBox
SlideshowTimeout
HeapFree
WM_COPYDATA
UiaRaiseAutomationEvent
UWATAUAVH
8@kk3
PA^_^[]
@A_A^A\_^
H$0===
Metering
E0;l$0H
S3tj\6
GetTickCount
FontStyle
<WMPDMCPlaylistButton background="themeable(dtb(EXPLORER::LISTVIEW, 1, 2), Highlight)"/>
T$PE3
G`H9_h
100@.
<if enabled="true">
wtttuttuuwLGYXPOA/
RichoG
L$@E3
<WMPDMCButtonHC content="sgraphic(262,2)"/>
7bzzz
Indicator
H+FPH
user32.dll
D$X9F4
.CRT$XIY
api-ms-win-shcore-scaling-l1-1-1.dll
<button contentalign="focusrect" background="themeable(dtb(EXPLORER::LISTVIEW, 1, 5), Highlight)"/>
A^A]A\_^
lkl=lkl
{qfvv
uFD;n
Never
L$@H3
PostMessageW
mb`&yi
WMPDMC_MESSAGE_FINISH_OP
wcstok_s
LNM366
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(379,2)"/>
TranslateY
GdiplusShutdown
LineDown_Arrow
Keyboard
LU^!Gj
D8l$P
D9EXu@
TouchCheckBoxGlyph
R##**H
D9t$`A
ModernProgressBar
zS[)^[
WEVT_TEMPLATE
h AWH
!&&''
[=nO]cSC
<P<NM<L<
@)3zP
Animation
OffsetWindowOrgEx
P_pQc
D9I@sIH
9+v%H
LineRight
Software\Microsoft\Windows\CurrentVersion\TilingManager
[FxcM
R2uxy
T$`E3
A(A;@
)|$ E
UWAVH
n8toE3
MultiByteToWideChar
(D$`H
TouchSlider_TrackChild
ATL$__m
`A_A^A]_^[]
!}HH;
PLAYTO_INTERNAL_OPERATION
State
arrow
A_A^A\
Microsoft-Windows-WMPDMCUI/Diagnostic
STOP_BUTTON
/fD;e
@VWAVH
MinTileWidth
bGd%Z;
9]0vjH
EndEllipsis
Unrecognized property value.
d$8M;
next_glyph_resource
Order
GdipCloneImage
\$ H;
CreateGadget
iswspace
Na/KV*
gradient
Determinate
PopupBounds
TouchCarouselList
%hu:%hu
UWAUAVAWH
@A^A]A\_]
+D$@H
WMPDMC_MESSAGE_SEEK
<if id="atom(mute_button)">
>8644
fE9$Fu
x+fD;
WMPDMC_MESSAGE_DEVICE_TIMEOUT
D$0fD
UnregisterTraceGuids
GetTextColor
@A_A^A]_^
<WMPDMCPlaylistButton contentalign="focusrect" background="themeable(dtb(EXPLORER::LISTVIEW, 1, 5), Highlight)"/>
<WMPDMCPlaylistButton background="themeable(dtb(EXPLORER::LISTVIEW, 1, 5), Highlight)"/>
DistanceThreshold
NEXT_BUTTON
MapVirtualKeyW
msctls_progress32
TouchSelect
SelectScrollBar
D+IT+
SHELL32.dll
ifgreaterequal
TouchSwitch_Track
lfV1?
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(261,2)"/>
T$XE3
DUI_E_UNREGISTEREDELEMENT
-=An4fWfI
h^5[]
WMPDMC_MESSAGE_DEVICE_UNRESPONSIVE
SetTransitionVisualProperties
WMPDMC_MESSAGE_CLEAR
@A^_]
+\$(+\$ +\$8+\$0
I9^Ht
</duixml>
resstr string not found
ultra_bold
A^A\]
<if id="atom(transport_holder)">
uss3XLEE
u/D95
WMPDMC_MESSAGE_COMPLETED_COCREATION_OF_CORE_ON_CLIENT
SetGadgetOrder
L;A u
L!Q H
|>FG'8
TouchCarouselScrollBar
_isnan
accname
q+kk'
I;A8w
)l$PH
ButtonMenu
(|$0D
Pbkc5
<WMPDMCThumbHC content="sgraphic(365,2)"/>
ATAUAWH
ExtraBold
t>D8s$u8H
|$@I;
XM54o(
GetBkColor
<WMPDMCButtonHC content="sgraphic(374,2)"/>
M9't2
UWATAUAWH
@SUVWATAVAWH
VWATAUAVH
WATAUAVAWH
nN4fA
r""##
L9I8tB
)D$@H
F I9>u
<WMPDMCButtonHC content="sgraphic(370,2)"/>
TEMPd
M9FPu
L$ UH
UnhookWindowsHookEx
mSP8(,
<WMPDMCThumbHC contentalign="middlecenter" accstate="0x00100000" content="sgraphic(366,2)"/>
8D8l>
Y++~cX\\
SymInitialize
0A^_^[]
R,#,#####,H
USVWAUAVH
FLV#t
)M !,
U/.Ki
D8{bt
SetWindowsHookExW
stop_button
recordedtv
WantTabs
H!]PH!]@
XElement
TreatRightButtonAsLeft
A_A^A]A\_
|$ E3
.CRT$XCAA
H9u8u#H
EdgeHighlightColor
processorArchitecture="*"
TouchSelectItem
}~fAR
\$@E3
REVERSE
s6?wD
bPOA<00/3
D+e H
\$ UH
ReleaseSRWLockShared
<WMPDMCButtonHC content="sgraphic(286,2)"/>
mute_split_button
@8o$u
MenuFont;;bold
ADVAPI32.dll
F2SX'
;} v0
C;;sHD
CRIM(
(|$`H
YJ)R~
cJ3]+
WMPDMC.exe
A,9A(
CreateThread
SetBkMode
.00cfg
t$ UWAUAVAWH
L!d$ E3
_wcsicmp
TrackPopupMenu
MiddleRight
FreeLibrary
lineright
WMPDMC Spinner Message Window
)t$ 3
@SUVWH
WMPDMC_MESSAGE_UPDATE_THUMBNAILS
GdipSetInterpolationMode
GetWindowTextW
n%hY"
<WMPDMCButtonHC content="sgraphic(343,2)"/>
]vus{
RoundingFactor
wH{g2B
fD93t
lstrlenA
<WMPDMCButtonHC borderthickness="rect(0rp,0rp,0rp,0rp)"/>
f;D$8uXH
T$0E3
;<@@E
UVWATAVH
GetKeyState
ATAVAWH
Az@z)
D8o)tGD8
UXD8M`
<$fA9
(@95E
CompanyName
fD9du
l$$fA
8[. uW
u>I9^P
GetCurrentThreadId
@A_A^_
O~lRJ
PlayEnhMetaFile
SnapOffsetX
wwp`pp
argb(%u,%u,%u,%u)
<WMPDMCButtonHC id="Atom(repeat_button)" sheet="AVTEffects" accessible="true" active="mouse|keyboard" height="25rp" width="25rp" resid="repeat_button" accrole="pushbutton" accname="resstr(158)" accdesc="resstr(158)" tooltip="true" background="argb(0,0,0,0)" layout="flowlayout(0)">
D$HA+
D$0H9<
DwmTetherContact
<element id="Atom(device_info_holder)" resid="device_info_holder" layout="borderlayout()" layoutpos="top" contentalign="middlecenter" background="argb(0,0,0,0)">
InvalidateGadget
H%R%B
[/v]>
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(267,2)"/>
jzzzVSSS
CommunicationsStyle
u HcA<H
subscript
@SVWATAUAVAWH
<WMPDMCButtonHC content="sgraphic(287,2)"/>
d2)tj
dlna-playsingle
Inertia
&PROPSYS.dll
calloc
(t$0D
^uD>g
WMPDMC_MESSAGE_Play
SnapPointCollectionY
P-|!u2
GetProcessHeap
TouchHWNDElement
{ AUAVAWH
SetThreadPreferredUILanguages
OpenThemeData
3B|r*
Sleep
HA^_^[
maN!N
M9&t9
N)oXsq
LineRight_Arrow
L)|$PH
AllowBackgroundTooltip
MaxSizeBehavior
HKEY_CLASSES_ROOT
D$p9_
dlna-playsingle://%ls?sid=urn:upnp-org:serviceId:ContentDirectory&iid=%ls
(AkGU
<WMPDMCLabel id="Atom(friendly_name_text)" content="resstr(132)" accessible="true" active="mouse" accrole="statictext" accname="resstr(132)" layoutpos="top" contentalign="middleleft|endellipsis" resid="friendly_name_text" font=";bold;;" foreground="windowtext" background="argb(0,0,0,0)"/>
mmmtdHhzj
NoPrefix
9O4t6
GetTextExtentPoint32W
GetFocus
DFCFill<T:%d,S:%d>
GlobalFree
fD9*t
FreeLibraryAndExitThread
a&SS$
t$ UWATAVAWH
GetUserDefaultUILanguage
8T$ht
PLAYTO_INTERNAL_OPERATION_PREADDTOPLAYLIST
SnapPointCollectionX
gI6VHdM
D$4A+G
Multiline
P@,d'
(t$ H
@SUVWAVAWH
GdipGetImageWidth
GetGadgetSize
ForwardGadgetMessage
{ AVH
DetachGadgetVisuals
Is70>wxW
40cOfgw
TouchSlider_Thumb
DUserSendEvent
<element layout="flowlayout(0,2,2,2)" layoutpos="client" contentalign="middlecenter" background="argb(0,0,0,0)" width="53rp" height="53rp" minsize="size(53rp,53rp)">
D9f@v3H
z5u3H
CGITPtr::Set
gyppP1/5
oT$@f
7tJJ:
WMPDMC_MESSAGE_UPDATE_PLAYLIST
9w(vsL
jWGyw
_wtol
$$R!e
+=azz:
vur@rqnyqpk
D$pA;
l*]a3K
WindowsGetStringLen
RegOpenKeyExW
active_media_item_title
f9EXur
ReleaseSemaphore
0A_A^A]
iswalpha
wmpdui.dll
v(D9v,t-H
CreateAction
%iiir
wcsncpy_s
ChangeWindowMessageFilterEx
SetBkColor
threeddarkshadow
CreateEventExW
Baseline
hA^A]_^[]
xqD95W
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(272,2)"/>
A+v$+
CopyRect
L.H-P
<if id="atom(repeat_glyph_resource)">
failed to resolve
~PM;~Xr
DeleteHandle
_wcsnicmp
DrawThemeTextEx
L9!uFA
resstr
<element layout="borderlayout()" layoutpos="client" resid="media_info_holder" contentalign="middlecenter" background="argb(0,0,0,0)">
l$8A;
slider
;Y\ku
x,'n`
PA_A^A]A\_^]
LockResource
<element layout="verticalflowlayout(0,2)" layoutpos="client" background="argb(0,0,0,0)">
GetObjectW
0A_A\_
Raised
RefPointElement
l$ VWAVH
)|$ I
`A_A^A\_^[]
Dt$@H
Im2LV
ThresholdGrow
Jwvtl
h VWAVH
D;e(r
GetWindowRgnBox
BuildInterpolation
^TffeM
BT?63
D$8H;
0<<<O?
iflesser
;L$4}3;
bq,QZ
msctls_trackbar32
AnimationTrap
ninegridlayout
OGG;SSS455
borderstyle
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(355,2)"/>
&)+79BN
T$8H;
fA9,Bu
_TWW'
<element id="Atom(active_media_item_info_icon_holder)" resid="active_media_item_info_icon_holder" layout="borderlayout()" layoutpos="left" active="mouse|keyboard" background="argb(0,0,0,0)">
TY-m7
L$ SUVWH
ResolveDelayLoadedAPI
DrawIconEx
Remote
infobackground
<WMPDMCPlaylistButton background="themeable(dtb(EXPLORER::LISTVIEW, 1, 6), Highlight)"/>
WMPDMC_MESSAGE_FORCE_FOREGROUND
Default
x AUH
D9m_u
RegisterClassExW
PSK$+
image/png
absolute
CCCheckBox
@8~8t
ElementWithHWND
<element accessible="true" accrole="statictext" layoutpos="client" id="atom(inactive_media_item_title)" resid="inactive_media_item_title" contentalign="middleleft" background="argb(0,0,0,0)" padding="rect(2rp,0rp,0rp,0rp)"/>
@ +APE
R$fA;Z*
GrayText
XElementButtonFocusChange
L$@H!\$@H
ymr~n
A,6dL
<element layout="borderlayout()" layoutpos="top" contentalign="topleft" id="Atom(inactive_media_item_layout)" resid="inactive_media_item_layout" background="argb(0,0,0,0)" padding="rect(0rp, 4rp, 0rp, 4rp)">
H!D$(
PinVert
wwwK.
(|$ L
<WMPDMCButtonHC content="sgraphic(375,2)"/>
tT+t$(E3
Diagram
iconfont
AddAtomW
D9ihu
WaitForMultipleObjects
<iflesser custom="65">
Thumb
TouchSlider_Track
UATAVH
<if custom="1">
black
MouseAndKeyboard
D$PE3
RectangleH
GdipCreateHBITMAPFromBitmap
nHS2BSX
Mouse
D$`Hc
StyledScrollViewer
ScrubBehavior
9/v$H
Fb}Il
.didat$7
T$hE3
rf_horizontal
ImageList_AddMasked
InitGadgets
memmove
wwwwwwwww
];tv(
%+L$4;
TRANSITIONING
$z+y2
^{-333LNN222
T$PH;U
D9}_v+A
D9alA
H!|$ L
GR?UCR;
u^!|$8H
@](\D
_callnewh
%hu:%hu:%f
f94Bu
FORWARD
StringFromGUID2
audio/
A_A\_
__set_app_type
vqpVA
L$xD+
CheckBoxGlyph
T###,X
/2(pB
Width
NGGTf
D9movJH
prev_glyph_resource
A;6~BI
H9_8t
WMPDMC_MESSAGE_SEEK_SUPPORT_CHANGED_BY_DEVICE
T$8E3
D$`D95
M}}\v
FontWeight
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(357,2)"/>
IDATx
SizeH
OiHzzzzzF2
Scale_100
MinTileHeight
ceilf
*B]lzv
040904B0
WMPDMC_MESSAGE_MUTE_CHANGED_BY_DEVICE
CPZZKq
windowframe
<WMPDMCButtonHC content="sgraphic(342,2)"/>
FindAtomW
accessible
?T?TT?T(
8UHtYA
.rdata$zETW2
D8G$u
SizeofResource
wcstol
AdjustClipInsideRef
DynamicScaling
@USVWAVH
WindowText
seek_bar
Padding
u#H91t
(D$@H
D9{Pu3D9KLu-D9CHu'D9kTu!D9cXu
active_media_item_album_art_holder
DaDWW
PA_A^A\_^][
lstrcmpiW
ReleaseDC
WindowsDeleteString
fB94Su
AcquireSRWLockShared
swprintf_s
-SM1r
<if captured="true">
nWJ9v
GetCurrentObject
Document
HcA<H
}y{uc
CreateIconIndirect
A_A^A]A\_^]
ATOM<%d>
%hu:%hu:%hu.%f/%f
f9\$Pt
PeekMessageW
<WMPDMCButtonHC content="sgraphic(288,2)"/>
A_A^]
\$ ;]
<element layout="borderlayout()" layoutpos="top" height="16rp" background="argb(0,0,0,0)" margin="Rect(0rp,4rp,0rp,0rp)">
RedrawWindow
iswalnum
A(t&H
<if custom="0">
l$HE3
{.ItmO
NonAntialiased
` \"d
SHLWAPI.dll
TranslateMessage
stop_glyph_resource
<element resid="main" accessible="true" layout="borderlayout()" layoutpos="top" background="gradient(argb(255,223,234,247), argb(255,255,255,255), argb(255,223,234,247),4)" sheet="common">
E94$t
3w3'y
i&-KmE5-
ListItem
CCBase
I;~Hs:
failed to parse
67776g
<style resid="MediaListItemEffects">
uur``@vww
D\$$H
GetClientRect
555|
@A^A]_^]
".;'h
IsDialogMessageW
X:\N'-
right
WrapRight
ProgressBar
MinTileSizeX
{ ATAVAWH
5E7J)
pol&srnr}|w
WMPDMC_MESSAGE_OnPlayPause
PatBlt
@USVWAWH
ForceRemove
I&&!1s
background
L9|$xtSH;
p WAUAVH
D+D$8
Microsoft-Windows-WMPDMCUI
Proportional
=iFVaT
H9p(t
GetThreadUILanguage
D8t$5
RegQueryValueExW
6664x
333:A8
m^H)kvpQ
t$(E3
@SVWH
VarFileInfo
VWAUAVAWH
TEMP4
DWriteCreateFactory
^qS_o
^=OIOD
Graphic<0x%p>
_fmode
PLAYTO_DEVICE_STOP
<element accessible="true" accrole="statictext" layoutpos="top" id="atom(active_media_item_title)" resid="active_media_item_title" contentalign="middleleft" background="argb(0,0,0,0)"/>
H ATAUAVH
Class
@8l$@t
GetGadgetTicket
WMPDMC.pdb
ImageList_Destroy
DrawTextW
ReleaseLayeredRef
CCVScrollBar
<no module info>
HotLight
#w;t0
(D$ 3
resid:%ld
|$HA+
D9v(t-H
H(D9i
QueryActCtxW
PageUp
6H;WPu0H
CreateStreamOnHGlobal
e@)x/
HWNDElement
VWAWH
strnlen
inactive_media_item_album_art
H!\$ L
/J:Ne
o=;9765E
D9o8t
RangeMax
video
_vsnwprintf
<element layout="borderlayout()" layoutpos="client" background="argb(0,0,0,0)">
<WMPDMCButtonHC content="sgraphic(333,2)"/>
<WMPDMCButtonHC id="Atom(stop_button)" sheet="AVTEffects" accessible="true" active="mouse|keyboard" height="25rp" width="25rp" resid="stop_button" accrole="pushbutton" accname="resstr(144)" accdesc="resstr(144)" tooltip="true" background="argb(0,0,0,0)" layout="flowlayout(0)">
OL$89D$<
^j{99
CreateDIBSection
u2n[w_
N'}}}
OnText
0A_A^A]_^][
tXD9c
GetDUserModule
<if pressed="true">
GlobalAlloc
invalid property value
H!}8H
active_media_item_info_icon_holder
lr%^6
<button id="Atom(error_on_device_icon)" resid="error_on_device_icon" accessible="true" active="mouse|keyboard" accrole="pushbutton" layoutpos="none" accstate="0x00100000" sheet="GenericButtonStyle"/>
CCProgressBar
K/!!q
D9l$pt`E3
*Y7?g^
Shortcut
d{2Al
RegGetValueW
Cursor<0x%p>
CaptionFont
\$xI;
n7UUUl
SUVWAVH
WICCreateImagingFactory_Proxy
H!|$x
L$PE3
A^_^][
UxTheme.dll
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATUS_OK
SetRect
sta/Rlc(
M9eHuLA
B!jkku
api-ms-win-core-winrt-string-l1-1-0.dll
FormatMessageW
M|fZ{
(x'0p
(**+Q
imQTvT
MaxTileHeight
_wcstoui64
EditControl
InitializeCriticalSectionAndSpinCount
MinTileSizeFactorOver100
AccHelp
<button background="themeable(dtb(EXPLORER::LISTVIEW, 1, 3), Highlight)"/>
x-D8D$<
@"1Ab
Property
PLAYTO_INTERNAL_OPERATION_PRECREATEDEVICEFINDER
M9EPt
TouchSwitch
CoUninitialize
BgG;-
<!-- Copyright (c) Microsoft Corporation -->
ExpandCollapseBehavior
ImageList_DrawEx
LightDismissIHM
Cw!_1x,
l=d7E
GetDurationFormatEx
A_A^A]A\_
E\$dE
lIV=s
10.0.17763.1 (WinBuild.160101.0800)
}ZB'd
UiaLookupId
NoRemove
FocusRect
dwrite.dll
XElementUnhandledSyschar
inactivecaptiontext
SetDCBrushColor
DeleteCriticalSection
RaiseException
GetWindowLongW
fD9!t
OverrideButtonBackground
$0;K,
D;}(r
\$ WH
WMPDMC_MESSAGE_CONNECTIONSTATUS_CHANGED
<element id="Atom(device_icon)" layout="borderlayout()" layoutpos="top" accessible="true" accrole="graphic" accname="resstr(165)" content="icon(117, 48, 48, library(wmpdmc.exe))" contentalign="topcenter" minsize="size(48rp,48rp)" height="48rp" width="48rp" resid="device_icon" background="argb(0,0,0,0)"/>
RtlCaptureContext
<WMPDMCButtonHC content="sgraphic(282,2)"/>
playlist
class
win:Info
A_A]A\
CVolumeSliderDlg
Linear
D$,+D$$
FFFD}
Tt=M?O
HThumb
DuplicateHandle
x ATAVAWH
tRD9B
t'fD;!u!H
activeborder
.CRT$XLA
.Z[[u
l$ VWAWH
_eFJc
D$`u(H
PageDown
D$@I;
Dt$0Lc
GetCursorPos
]3;{wH
SetGadgetStyle
EVNT
GetWindow
Comctl32.dll
GQDu]
H9APt]H
extra_black
DUI_E_BADMARKUP
medium
A8N tgA
`E^sy
t:-4Mcir
GetDeviceCaps
GetWindowThreadProcessId
fF9,~u
|Ob]h
MJMts
DestroyMenu
<element layout="flowlayout(0)" width="20rp" height="52rp" resid="space" minsize="size(20rp,52rp)" background="argb(0,0,0,0)"/>
zz:z::6
"22**2
.j||\
\$(;]
media_item_content_holder
!|$(L
` UAVAWH
kz0\#
HeapReAlloc
]Yu8r
lineleft
WM_SIZE
GetClipRgn
>DOC;
StrikeOut
<WMPDMCButtonHC content="sgraphic(332,2)"/>
l$(E3
fF9,pu
D$DA+
HKEY_LOCAL_MACHINE
publicKeyToken="6595b64144ccf1df"
p^4W0?
semilight
MouseFocused
F(v4E
A_A^_
mouse_event
ButtonHighlight
GetIconInfo
iflesserequal
SetWindowRgn
IBeam
D$0A+
TryEnterCriticalSection
|$xH;Q
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(351,2)"/>
<T?TS>N<
lineup
x-D8L$4
<if keyfocused="true">
<if id="atom(play_pause_glow_resource)">
uo,[A
Sunken
Pressed
CCSysLink
;iCbY?O
TouchSwitch_Thumb
pqYVTZ
enabled
(|$@D
A_A^A\
<)*'$$&
-"RU5'
<WMPDMCButtonHC borderthickness="rect(2rp,0rp,0rp,0rp)" background="sgraphic(362,7)"/>
<WMPDMCButtonHC content="sgraphic(277,2)"/>
inactive_media_item_duration
4dM(c
scrollbar
Debug
DestroyWindow
<if id="atom(play_pause_glyph_resource)">
D9}_vJD
Buffering
D$0H;
n\D9y{
H;Q0u'H
CeBL`f
<WMPDMCButtonHC content="sgraphic(338,2)"/>
L$H9L$Lu
9nACJ/
@A_A^A\_^][
r%h[^
WMPDMC_MESSAGE_UPDATE_TRACKTIME
T$@+T$8H
x AUAVAWH
MenuItem
<element layout="borderlayout()" layoutpos="top" padding="rect(0rp,3rp,0rp,0rp)">
SnapOffsetY
B(A B
Inactive
@USVWATAVAWH
ContentAlign
ninetopleft
GetVersion
)t$0M
<ifgreaterequal custom="1">
fG9$~u
ExtTextOutW
Q(A9P
(|$ H
(t$@H
qq];M
IntersectRect
CS@,f
Failed parsing XML
7fD;>u
SetWindowTextW
ninetopright
ha8!0
D+uWE
<element accessible="true" accrole="graphic" accname="resstr(166)" contentalign="middlecenter" visible="false" layoutpos="left" width="5rp" height="5rp" content="sgraphic(299,2,-1,0,0,1,1)" id="atom(inactive_media_item_playing_indicator)" resid="inactive_media_item_playing_indicator" background="argb(0,0,0,0)"/>
DUIDestroyMsg
<duixml>
Slider
Expandable
rLmAgE
k\-#(
LPtoDP
DeleteDC
o"m$1
\$h)D$h)T$hD
;?hXA
threedface
GdipAlloc
ChangeCurrentAnimationScenario
o*1-#
Thumb_Mouse
HandleEnter
__wgetmainargs
ReleaseSRWLockExclusive
06~?Y0
qa<>8
VUUUA
A9u0t-H
LoadCursorW
EnableMenuItem
TouchSlider
&26S-
y`` H
smcaptionfont
LineUp
u$L97t
RtlLookupFunctionEntry
D9o@v
WindowAccessGradientColor
y/'#
35L-K
<element id="atom(active_media_transition_animation)" resid="active_media_transition_animation" contentalign="middlecenter" accessible="true" accrole="graphic" layoutpos="none" margin="rect(0rp, 0rp, 6rp, 0rp)"/>
(;*1@B4J
8zgvVU
f?>ox"
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(274,2)"/>
GetTraceEnableFlags
9QXuGI
<button accstate="0x00300000"/>
##$)+77=FGGX
l$ WATAUAVAWH
D$8H;C
StaticText
tYD9~Xt9A
QueryPerformanceCounter
</style>
BitBlt
\$(E;
H*E8X
t$0E3
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(308,2)"/>
TouchSelect_Arrow
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(377,2)"/>
D9j8~
<element layout="flowlayout(0)" width="40rp" height="25rp" resid="space" minsize="size(40rp,25rp)" background="argb(0,0,0,0)"/>
msvcrt.dll
\$ UVWATAUAVAWH
D;v0}
Software\Microsoft\MediaPlayer\Preferences\DMC
StringFileInfo
IsProcessDPIAware
oD$ f
layout
t$ WAVAWH
Expand
SideGraphic
GdipCreateImageAttributes
{DB9830BD-3AB3-4fab-8A37-1A995F7FF74B}
<element layout="borderlayout()" layoutpos="right" padding="rect(2rp,0rp,4rp,4rp)" background="argb(0,0,0,0)">
D9kh~
gdiplus.dll
0A_A^A]A\_
(t$`L
ole32.dll
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(354,2)"/>
L$hH;
D$X9D$`A
fA9B`A
YPke@
<WMPDMCButtonHC content="sgraphic(341,2)"/>
3g6`f
_aaj=
c8tlE3
WMPDMC_MESSAGE_VOLUME_CHANGED_BY_DEVICE
AccRole
z{{ikk
D9EXu
s WATAUAVAWH
<WMPDMCElementHC content="sgraphic(298,2)"/>
active_media_transition_animation
|(D&W
MFCreateMFByteStreamOnStreamEx
8/vaf
Xfb(6d
<WMPDMCThumbHC content="sgraphic(367,2)"/>
nN0fA
@8u0u
Combobox
WMPDMCButtonHC
]FFFFFFFFF]
DUIXmlParser: Failed to add elements to parent
FontColorRuns
H9.uRH
@A_A^A]
l$ VWAUAVAWH
.text$mn
f[jBbv]&{o
<element accessible="true" accrole="graphic" accname="resstr(164)" contentalign="middlecenter" layoutpos="client" direction="0" id="atom(active_media_item_album_art)" resid="active_media_item_album_art" background="argb(0,0,0,0)"/>
D$XE3
EnforceSize
+L$8A
playlist_holder
Checked
D$ D95
D$@M;
GdiTransparentBlt
<if id="atom(prev_button)">
?2Jiv
DUIXmlParser: Could not find element with resid
y&HW2
GlobalUnlock
messagefont
x ATAUAVH
f;D$8u\H
ud!D$`L
Light
<WMPDMCButtonHC content="sgraphic(271,2)"/>
D$ E+
D$(D;
captionfont
D9mov+H
Interface
Alert
D$4)G
SUVWATAUAVAWH
L$XLk
B(H9H
PageRight
D$(+D$ ;
D;|$0
fE9,Fu
TouchCheckBox
EOA8F twA
Maximum
@UWAVH
t$XE3
EventWriteTransfer
Right
KeyFocused
b=#Je9%B
RtlCaptureStackBackTrace
REL_TIME
oL$0f
x_^][
<element accessible="true" accrole="graphic" accname="resstr(164)" contentalign="middlecenter" layoutpos="left" width="16rp" height="16rp" minsize="size(16rp,16rp)" id="atom(inactive_media_item_album_art)" resid="inactive_media_item_album_art" background="argb(0,0,0,0)"/>
VisualState
X_DLNA_SeekTime
Windows.Foundation.Collections.IIterator`1<String>
<F/u
DesiredSize
L$`H3
fD9$Cu
?qz+a
#sgraphic
D$@E3
MiddleLeft
tBE3
<element resid="device_info_holder" layout="borderlayout()" layoutpos="client" background="argb(0,0,0,0)">
L$XH;
UpdateWindow
1G_cR
|||<ZZZ
ReleaseMouseCapture
CacheDWriteRenderTarget
A_A\]
f9,Hu
;[B#o
xA_A^A]A\_^][
.didat$6
DistanceThresholdOver100
WindowsGetStringRawBuffer
333333
f;D$(u4
RoTransformError
|$0,u
AutoHeight
wwwwwww
<WMPDMCThumbHC content="sgraphic(366,2)"/>
^m|OD
<WMPDMCThumbHC contentalign="middlecenter | focusrect"/>
t=E3
\$8A+
8A^_^[
TranslateAcceleratorW
$m `@A
IsDebuggerPresent
w,>>*
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(348,2)"/>
JumpToClick
E9}dt
sysmetricstr
HA_A^A]A\_^][
H;wHt
D$xH9D$pt
Italic
"#*6x
9Q@s&H
A^A\_^]
GetGadgetFlags
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(260,2)"/>
USER32.DLL
@A_A^A\
Module_Raw
PRVAL
CoCreateGuid
TouchRepeatButton
D$HI;
RtlVirtualUnwind
lkljvuv
PageTabList
_wcmdln
D;A,sOA
Unchecked
|$ UH
qplL|{x
GetModuleFileNameW
Reorderable
@SVWATAUAVAW
NoAutoFocusRectVisibility
USVWAUAVAWH
AcceleratorBehavior
NIsolationAware function called after IsolationAwareCleanup
fD;8ugH
t^H!x
pA_A^_^]
D$xA;
ExtCreateRegion
u@D9E
EdgeHighlightThickness
OutlineButton
A_A^A]_^
TitleBar
SetTimer
<WMPDMCButtonHC content="sgraphic(281,2)"/>
(t$pL
<*WA=
<WMPDMCButtonHC content="sgraphic(275,2)"/>
Captured
HotKeyField
`?,-(
USWAVAWH
VerticalScript
;D$0u?
Expando
b'y)[
|$xLc
D;d$H
<style resid="AVTEffects">
M*`rH
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(273,2)"/>
AttachWndProcW
.CRT$XCA
SetGadgetRootInfo
8|Fk(
AbsorbsShortcut
RoGetActivationFactory
KERNEL32.dll
D8F$u
See the debugger output for the list of addresses or dump contents of DirectUI::g_pLeakedElementList
OleInitialize
stylesheets
YcN]VVV0
;L$4}
Polyline
H9+uB
f;D$@
@KS#u
vur0utqrhgd
GetSubMenu
,(zgB}U
cm_invokingpoint
8<s[H
Sound
ImageQuality
)t$`H
t$0@8
<WMPDMCThumbHC content="sgraphic(304,2)"/>
u^H!E
MaxTileWidth
xKfD9eHu*
ButtonDropDown
gtmet
IndependentAnimations
UnhandledExceptionFilter
IpAddress
MFPlat.DLL
image/
D8u8t
WMPDMC_MESSAGE_RETRIEVE_CORE_OBJECTS_FROM_COM_SERVER
FindResourceW
AdjustWindowRectEx
DefWindowProcW
EventUnregister
TraceElementLeaks
MinTileSizeFactor
active_media_item_info_icon
LresultFromObject
5Bua)
9qHv-H
GetVersionExW
@SUVWATAUAVAWH
MapRunsToClusters
nD$PH
Expr<0x%p>
[%s] %s
MapViewOfFile
H;yHs f
d M^w
composited
'?a``
VerticalScrollBar
active_media_item_album_art
M@L;K
H!}PH
hA_A^_^[]
GetSystemDirectoryW
duixml
PLAYTO_INTERNAL_OPERATION_PRECREATEDMCDEVICE
VS_VERSION_INFO
ConstrainTooltipToWorkspace
active_media_item_album_title
?=u$L
\$xH;
WMPDMC_MESSAGE_Play_Async_Completed
SetGadgetLayerInfo
LcD$TE3
H!|$ E3
xNL9ePA
Pinning
<element id="Atom(inactive_media_item_info_icon)" resid="inactive_media_item_info_icon" accessible="true" accrole="graphic" contentalign="middlecenter" layoutpos="none" minsize="size(16rp,16rp)" background="argb(0,0,0,0)" padding="rect(3rp,3rp,3rp,3rp)"/>
@A^A]_
cm_elementrect
PLAYTO_INTERNAL_OPERATION_PREFINDBYUDN
x UATAUAVAWH
</dependency>
%&&z1Y,X
A_A^_^]
9O$tE
video/
L9vPA
.CRT$XCZ
D90v(H
P=ITg
FontWeightRuns
xV@8l$4
Macro
H9JPt
Heavy
f9,Bu
fsDQH&
PostQuitMessage
7fd',
?xcZ<
#TzU;
borderlayout()
SelectClipRgn
GetPixel
fF9$pu
content
R6eS6e{
hhhhhhhhhhhhhbPf
`A^_^[]
GetScaleFactorForDevice
vyq5<o-
SendMessageW
Scale_140
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(266,2)"/>
\$PE3
SelectPalette
@8t$P
UIAInvokeHelperWndClass
ItemHeightInPopup
GetThemeMetric
T$ 9U
DwmIsCompositionEnabled
Background
eW\Agm7
Frameindex
false
.data
<if id="atom(play_pause_button)">
D8f$u
<style resid="ClearListButtonStyle">
extra_light
A_A^A]A\_^][
KEEEEE+'-.
_'2t$6
<if id="atom(pageright)">
<WMPDMCThumbHC content="sgraphic(319,2)"/>
=...`
<9VN&
ArrowsAtTop
</WMPDMCButtonHC>
Table
Scale_180
DUI_E_INVALIDPROPERTY
J@+C}
L$pE+
L$8H;
memset
RegisteredDefaultButton
repeat_button
<if id="atom(next_glyph_resource)">
GetActiveWindow
0A_A^A\_^][
<T?PN>M<
GetThreadPreferredUILanguages
iswdigit
fA94Au
CCTreeView
7;>btt
YU|xx
GetThemePartSize
TouchScrollViewer
WMPDMC_MESSAGE_START_COCREATION_OF_CORE_ON_CLIENT
x yulA
SetFocus
DontCare
9A98u6A9x
SizeV
EKk_^
\$ UVWAVAWH
GetProcAddress
)|$PD
9s ~ 3
UiaHostProviderFromHwnd
ProductName
<WMPDMCButtonHC content="sgraphic(371,2)"/>
D9uDu6A
m;p|}
GetClassNameW
D8D$D
8V ty
Bottom
Thumb_Pan
TlsGetValue
<element id="atom(inactive_media_transition_animation)" resid="inactive_media_transition_animation" contentalign="middlecenter" accessible="true" accrole="graphic" minsize="size(16rp,16rp)" padding="rect(2rp,2rp,2rp,2rp)" layoutpos="none"/>
fD; t
A8l$bu
CreateCompatibleDC
A9^Xt
<tW!K
SplitButton
graytext
XScrollable
D8{$u
@8kdt
O^[-s
Found non-stylesheet element while parsing for stylesheets
$)+7=DEI]
oPL9oXt[
.idata$6
+t$8D
(|$0I
T$xE3
t$`E3
TaskDialogIndirect
@A\_]
D$`E3
:rz:p
+t$0D
8-777=;
cM@G[k[OcSc
p+`Kg
<element layout="flowlayout(0)" width="12rp" height="52rp" resid="space" minsize="size(12rp,52rp)" background="argb(0,0,0,0)"/>
<WMPDMCButtonHC borderthickness="rect(2rp,0rp,0rp,0rp)" background="sgraphic(316,7)"/>
Invalid parameter passed to C runtime function.
Style element requires a resid attribute
<element resid="main" layout="borderlayout()" background="argb(0,0,0,0)">
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(378,2)"/>
TouchHyperLink
SHCreateItemWithParent
<element accessible="true" accrole="statictext" layoutpos="top" id="atom(active_media_item_artist)" resid="active_media_item_artist" contentalign="middleleft" padding="rect(0rp,3rp,0rp,0rp)" background="argb(0,0,0,0)"/>
GetParent
KaF~9
AccDefAction
GdipFree
8F&1"
picture
\UWw327
transport_holder
D$XI9
Element
Separator
GetBufferedPaintBits
Always
@A_A^_^]
d$dD)T$dD)L$d
uLD!l$XD!l$\
D$HE3
ShowTick
tjH!x
SizeInLayout
Whitespace
<if keyfocused="true">
<WMPDMCButtonHC content="sgraphic(339,2)"/>
UnregisterPowerSettingNotification
0A^A]A\
GetWindowTextLengthW
TopLeft
GdipDrawImageRectRectI
;duibu
CallNextHookEx
(D$0H
t$ UWAVH
L$HA;
A%!a%
FileVersion
EL$(L9
HeapSize
H^FmmmmmF_G
W)8W(tt
WM_QUIT
ninefill
LineSpacing
)D$0A
L$hH3
PLAYING
fE9,wu
fD;?tXH
r#W]z9=-
SVWAVH
ESq'6
p AWH
Caret
TlsAlloc
CCHScrollBar
U(aLUj4M
Locale
vs&iXI
WMPDMC_MESSAGE_SetAvTransport
<unknown>
u\"ti
D$PE+
statusfont
t$ E3
<if highcontrast="0">
fD94Xu
h AVH
t$<E3
CreateDialogParamW
Height
pA^_^][
tffD;&t`H
B;;sG
D9l$@
TouchSlider_Tick
3cLmS
f99t
Uo"/;
+\$@D
Q<"16
55'6~
result
fB9,Au
ThemedBorder
D9t$D
JqMKm+wRX
DUI_E_MISSINGPROPERTY
UAVAWH
A_A^_
fA9Z*v$A
memcpy_s
Tz]?-
Delete
D+GpD
</dependentAssembly>
(XDp+
(|$PI
?k5.rO
WMPDMC_MESSAGE_FUNC_RefreshDevicePlaylist
;U~naf
USVWATAVAWH
<WMPDMCButtonHC content="sgraphic(340,2)"/>
ListBox
I;GPt
Va6OD
GetThemeMargins
D$ A;
</element>
<WMPDMCElementHC id="Atom(transport_holder)" layout="flowlayout(0, 2, 2, 2)" height="52rp" width="310rp" direction="0" sheet="AVTEffects" minsize="size(310rp,52rp)" resid="transport_holder" contentalign="middlecenter" background="argb(0,0,0,0)">
<button contentalign="middlecenter" accstate="0x00100000" padding="rect(3rp,3rp,3rp,3rp)"/>
globals
9_Du,
t>D8{$u8H
CHANl
GetGUIThreadInfo
CompareStringOrdinal
borderlayout
MenuFont
FileTimeToLocalFileTime
@Qm6t
EQ`N+
M9&t=
0A_A^_^[
PjHzzzzz$
fD9$ou
tCfD;;t=H9
p?33s?
PVRj`
ThumbPosition
L9l$hum
L$(H;
|$xE9)
ManipulationHorizontalAlignment
MinSize
{ UATAUAVAWH
active_media_item_duration
HT+PP+HL
l&Cww
invisible
Antialiased
w>gk;
}1$_=C
c```(//
inactive_media_item_info_icon
Cast to Device
vWD91t
mute_button
GdipCreateBitmapFromScan0
H9s0t
<WMPDMCElementHC content="sgraphic(373,2)"/>
/>
WindowsCreateString
w@I;~
tcD8i
f9FPu
CoTaskMemAlloc
L$4D;
t$ WATAWH
unrecognized value
D!d$(H
}}||{vtsUa
TranslateRails
H9nXt
x`L97uFI
U`?(
F*"%7
<if class="ScrollViewer">
EventRegister
Recording
99=8'^
u'9r u"
GradientActiveCaption
.(*$f
H;CP}
_wcsdup
GlobalLock
PropVariantClear
Grouping
u"D9E8t
088HWWWN
WMPDMC_MESSAGE_INVOKEMEDIAITEM
p6pJ9
A_A^_^]
<WMPDMCElementHC layout="flowlayout(0)" custom="true" height="52rp" width="52rp" resid="play_pause_glyph_resource" id="atom(play_pause_glyph_resource)" sheet="AVTEffects" background="argb(0,0,0,0)">
CoInitializeEx
)t$0E
f.nCO
"4)DC
GDI32.dll
!",T4_
TD!lBD
BorderThickness
DUIXmlParser: Internal: Failed to pop Element to stack
z(z:x
UtilDrawBlendRect
L$ H;
connecting_animation_top
DUI70
H+FP3
highlighttext
InvalidateRect
H`FmmmmmF`H
GetDpiForWindow
<element accessible="true" accrole="statictext" layoutpos="client" id="atom(active_media_item_album_title)" resid="active_media_item_album_title" background="argb(0,0,0,0)"/>
MenuPopup
l6#EQ
u D9~lH
GetStockObject
HeapAlloc
A_A^A\_^
CustomGadgetHitTestQuery
DUserStopPVLAnimation
A{9>[
Viewer
AnimationStrip
PText
<WMPDMCThumbHC contentalign="middlecenter" accstate="0x00100000" content="sgraphic(300,2)"/>
@USVH
Q.I-U
+D$0+
(D$ L
0A__^
DelayShort
D$PA8hHu
TouchSwitch_Buffering
UIFILE
XBaby
PtInRect
GdipGetImageGraphicsContext
ObjectFromLresult
CCListBox
LCIDToLocaleName
<Ctm<H
SVWAVAWH
%4lc=%u
active
ButtonShadow
KC}=3
L\$<A
~&fl?
Cau]'Y
TopIndex
#ERE-rp
.data$brc
T!|$hH
L$pH3
UFI9p
]Ss?c
{G@a|8
(@IPJ
Error parsing XML
</ifgreaterequal>
ClearType-Natural
H3E H3E
InternalName
GetAncestor
?<?t1I
fRenderAlreadyExists
strncpy_s
Location
CreatePen
RectVisible
HighDPI
buttonface
D+t$`
malloc
<element layout="flowlayout(0)" width="4rp" height="52rp" resid="space" minsize="size(4rp,52rp)" background="argb(0,0,0,0)"/>
HKEY_CURRENT_CONFIG
Software\Microsoft\DirectUI\DynamicScaling
AccItemType
udp;{
H;A0u&H
Hlfxx
H;Q(t
TranslateXYOptional
FontSizeRuns
|$XfD
\$8E;
"VZjh+
CreatePatternBrush
HighLight
Ld$@;t$H}
TaskDialogStyle
GetGadgetRgn
WMPDMC_MESSAGE_OnPictureTransition
.rsrc$02
TopCenter
\$ UVWATAUAVAW
@`cV"
<element id="Atom(volume_bg_holder)" layout="borderlayout()" layoutpos="top" contentalign="middlecenter" resid="volume_bg_holder" background="argb(0,0,0,0)">
_unlock
L$ A;
GetDC
SetTextColor
<WMPDMCButtonHC borderthickness="rect(2rp,0rp,0rp,0rp)" background="sgraphic(369,7)"/>
Ll$0I
TextStyle
>IRo%V
RegisterApplicationRestart
en-US
(t$0H
u D9J
GdiAlphaBlend
R****H
threedhighlight
WMPDMC_MESSAGE_FAILED_TO_INITIALIZE_PLAYLIST
<T?TS?T>
TlsSetValue
OLEAUT32.dll
})D9uXuyD9uPus3
autobutton
D96v$H
%s!%s+%#08x (%#08x)
CreateHalftonePalette
TSVEnableVirtualization
HL12SN5h
.text$di
REGISTRY
edgehighlightcolor
GetGadgetStyle
BringWindowToTop
MLJqJIG
USVWAVAWH
[G_.'
x/L9|$pu(A
Error parsing DUI-XML
+\$DA+
(|$PD
t'D8i
DUI_UIA_InvokeHelperMsg
\$XI;
VATAUAVAWH
(t$@L
VWATAVAWH
MulDiv
MMzz/
4pRt_
TopRight
9p0tA
_J{j>
l$0H;
UnregisterClassA
[LcM4p
u[D8|$`tT
iN<Of
eY9Uo
El<0x%p>
Single
On3dL
]t7f
GetCurrentProcessId
9N4t<
8ths{{
D$PL9x
Layout<0x%p>
L$XH3
A^A\_H
RegCreateKeyExW
LineLeft_Arrow
@A^_^[]
\$0A;
fD94~u
@j_0 u,
GadgetTransCompositionChanged
margin
t6H9\$0u/H
,u'f9s
A9~Xt8
WMPDMCScrollViewer
BufferedPaintInit
OD$<I
playlist_scroller
Connect
FindActCtxSectionStringW
Hardware
Margin
SeparatorHeight
<assemblyIdentity
Rect<%d,%d,%d,%d>
MinTileSizeY
<viewer layoutpos="nineclient"/>
H;A8v
9ff|\
H!|$0
DelayLoadFailureHook
0A^_^][
language="*"
TouchDialogElement
,A+_ A+
WaitForSingleObjectEx
OutlineItem
<WMPDMCButtonHC content="sgraphic(270,2)"/>
MapWindowPoints
d$(E3
LqLK&N;B
T##,#,X
GetSystemMetrics
TouchSwitch_SliderContainer
x[H;uP
Module
tooltips_class32
<style resid="SeekScrollBar">
F8fE9
ManipulationVerticalAlignment
D;d$@D
PinHorz
sb_setselection
Underline
TCB_Glyph
D+D$P
CharUpperW
threedshadow
Windows.Foundation.Collections.IVectorView`1<String>
WMPDMC_MESSAGE_UPDATE_TRANSPORT_STATUS_ERROR_OCURRED
WindowsDuplicateString
Kkk+-
layoutpos
EnsureGadgetTransInitialized
<button background="dtb(Button, 1, 5)"/>
tDI97t
@USWH
i=C`Ob
<element layout="borderlayout()" layoutpos="right" margin="Rect(0rp,4rp,0rp,4rp)" background="argb(0,0,0,0)">
@USVWH
CoTaskMemFree
zrzrz
linedown
volume_button
PostThreadMessageW
_UPP;:
<selector id="Atom(playlist_selector)" layout="borderlayout()" layoutpos="client" resid="playlist_selector" sheet="common"/>
processorArchitecture="amd64"
I5__:
GetDesktopWindow
SemiBold
+3dXM
c-Ha.S
BottomCenter
duib+
TSVVirtualizedContainer
D8D$1tD
manufacturer_text
<button id="Atom(media_item_content_holder)" layout="borderlayout()" layoutpos="top" accessible="true" accrole="ListItem" sheet="MediaListItemEffects" resid="media_item_content_holder" active="mouse|keyboard">
.CRT$XIZ
PathCchAppend
TTTPPOO10k
thH9{PubH
Software
ElList<%d>
PathEllipsis
]`fA9>t_D
f;D$8u
Border
vJ`q+%
activecaption
yFGG]
L$TL!|$
@8t$4ux
VOL_END_THREAD
</WMPDMCElementHC>
InitializeCriticalSectionEx
%u,%u,%u
9T$`A
!This program cannot be run in DOS mode.
DUserPostEvent
fD96u"H
Xpm3{
@A^_^
A_A^A]_^[]
]y"Uv
PropertyPage
<button id="Atom(Clear_List_Button)" resid="clear_list_button" sheet="ClearListButtonStyle" active="mouse|keyboard" content="resstr(133)" accessible="true" accname="resstr(133)" accrole="pushbutton" layoutpos="top"/>
h4Juj%4
WMPDMC
<WMPDMCLabel id="Atom(manufacturer_text)" content="resstr(157)" active="mouse" accessible="true" accrole="statictext" contentalign="middleleft|endellipsis" accname="resstr(157)" layoutpos="client" resid="manufacturer_text" foreground="graytext" background="argb(0,0,0,0)" margin="Rect(6rp, 0rp, 0rp, 0rp)"/>
WordEllipsis
UTF-16
&R%$J
y@H;yHr
OffsetRgn
A_A^_H
GetAtomNameW
GdipSetImageAttributesWrapMode
!D$p3
A_A^A]A\_^[
D9I@sYH
GetLocaleInfoW
E@H;C
utq0{zv
9Q@sDH
TouchSwitch_TouchSlider
H!t$x
+t$hH
<style resid="volumeslider">
<element id="Atom(empty_text_content)" resid="empty_text_content" layoutpos="client" content="resstr(137)" accname="resstr(137)" foreground="graytext" contentalign="wrapcenter" accessible="true" accrole="statictext" background="argb(0,0,0,0)" padding="Rect(20rp,0rp,20rp,0rp)"/>
Dirty
DwmRenderGesture
!VW73
A^_^[]
@A^A\_
QueryPerformanceFrequency
qzzsX
USER32.dll
tiH!x
I~kBn
A^A\_
fD96t
[ZP6A
x UATAVH
wcspbrk
gY6%u]w
>D(Y
W$9_ u
>> Leaked Element at %#p
GetTextAlign
ozm}|a
Hyyy{tt
lkl=vuv
|$DE;
H SWH
<WMPDMCButtonHC borderthickness="rect(2rp,0rp,0rp,0rp)" background="sgraphic(363,7)"/>
<WMPDMCElementHC contentalign="middlecenter" content="sgraphic(356,2)"/>
l$hH;
pressed
SnapMode
Sheet<0x%p>
CreateXmlReaderInputWithEncodingName
L$<A;
CreateFontIndirectW
WMPDMC_MESSAGE_FUNC_SetBlockMediaItemAutoSync
HeapSetInformation
\$(E3
LockScreen
A_A^A]A\^
f9H\u
UiaReturnRawElementProvider
EnterCriticalSection
.CRT$XCU
failed to resolve property
RoundingFactorOver100
H;N(t
VeryFast
F@H;FHs
RegDeleteKeyExW
\$ E3
H;C8w%A
ED$(A
_errno
Failed to read or resolve value for attribute
IsRectEmpty
LoadImageW
WMPDMCSlider
?P1=R
D$8H;D$(u
t_H!x
SetScrollInfo
BorderStyle
~{ZDk
LineUp_Arrow
(|$PH
oHL9oPt[
L9}Pu
buttonhighlight
ScrollViewer
T$XE;
R;)\e
TouchSlider_Fillpart
IsContinuous
nNH#O
t$ WAUAVH
DuHE3
`A_A^_^]
HKEY_CURRENT_USER
accrole
GetCurrentProcess
DDfPL
8A_A^_^[]
wcsspn
9u(v'
playlist_selector
<WMPDMCButtonHC content="sgraphic(347,2)"/>
l$xM;
Equation
D!eHH
D$XH9F
CCAVI
win:Stop
5h"*Z
Scale
GetDCBrushColor
K SWH
_vscwprintf
L'+~:
9Qf]4
<if id="atom(pageleft)">
d$ E3
vG;}0r
|$@D;
DefaultButtonTracking
jox`H|M
+L$4H
MoJ\!
)t$0A
E_FAIL
SetProcessDPIAware
BottomRight
GetGadget
CharUpperA
X2xN:&
SysLink
LocalFree
t<M97t
###ch"^
NO_MEDIA_PRESENT
D$8E3
fHtp~m
cN8%O
DetachWndProc
SelectorNoDefault
type="win32"/>
heavy
</assembly>
bordercolor
.didat$3
A_A^_^][
Clear_List_Button
L$QA+u
LayoutPos
fD9<Ju
<element id="Atom(volume_popup)" direction="0" layout="borderlayout()" layoutpos="top" width="102rp" height="34rp" resid="volume_popup" contentalign="middlecenter" background="argb(0,0,0,0)" content="sgraphic(314,2)">
Translation
9q@v3H
ScreenToClient
C!&&&
<WMPDMCElementHC id="Atom(seek_background)" resid="seek_background" layout="ninegridlayout()" layoutpos="client" background="sgraphic(306,7)" borderthickness="rect(10rp,0rp,10rp,0rp)">
</SplitButton>
A_A^A]A\_^]
<element foreground="windowtext"/>
OptimizeMove
EX;0r
SizeNS
t(L9mPt"
ATL$__z
FindWindowW
(A_A^A]A\_^][
DeleteEnhMetaFile
8vsc#m
LineSize
<button background="themeable(dtb(EXPLORER::LISTVIEW, 1, 6), Highlight)"/>
TlsFree
OleUninitialize
AccItemStatus
W@GE~)
BufferedPaintClear
,LCYo7
<if id="atom(prev_glyph_resource)">
SmallIncrement
menufont
infotext
SetStretchBltMode
TP6uO
light
PLAYTO_DEVICE_SETAVTRANSPORTURI
UQQQQ23
D$H
RegisterTraceGuidsW
AddLayeredRef
TEMP,
gFdYB
Rectangle
repeat
wcsncmp
|$8I;
TargetPage
Reverse
rqrFrqr
` n[6
21]i6
u1D9nXu
FileType
WMPDMC_MESSAGE_InCaseOfErrorSetPlaylistWarningInfoButton
SemanticZoomToggle
<element id="Atom(playlist_holder)" resid="playlist_holder" layout="ninegridlayout()" layoutpos="client" borderstyle="solid" bordercolor="windowframe" background="sgraphic(256,7)" borderthickness="rect(4rp, 4rp, 4rp, 4rp)">
ProductVersion
PropVariantChangeType
ComboBox
WMPDMCPlaylistButton
Visible
</if>
x`@8o
TouchSwitch_TitleText
F%;+qzzh3
/:TxlJ\5
f94Cu
NarrowClip
DestroyPendingDCVisuals
ToggleOnClick
PosInLayout
t$PE3
.didat$4
uPI;w
Selection
__CxxFrameHandler3
PAUSED_PLAYBACK
ShowWindow
_onexit
<element layout="borderlayout()" layoutpos="top" background="argb(0,0,0,0)">
H WAVAWH
L$(+L$ f
xKf9k
.CRT$XIAA
\$HE+
@A_A^A\_^[]
^u]/)
q)_=v
xsf;}
t_q1J
Line_Arrow
SpinButton
<WMPDMCThumbHC content="sgraphic(303,2)"/>
A_A^A\_^[]
x,^$2
TitleText
` AVH
superscript
Windows
\UUUUUUUUUUUUUUU\
(t$0L
L$`D;
FontQuality
window
Cg`$RsV"0<
4Oeh@
SUVWATAVAWH
STYLE
9yHr$
)\$pE
WMPDMCThumbHC
D$0E3
HandleGlobalEnter
System.Photo.Orientation
PNGFILE
APn#|
=L9o<
I;A8v
7*l"Z
9O4t<
volume_bg_holder
WMPDMCLabel
.idata$2
GetTextMetricsW
TouchButton
x AVH
XOffset
T$8A+
L9mPu
.CRT$XCL
buttontext
u@yrR.9
196E4
)u*f9s
WJ?,C
D$0f;L$(u
D$8L;
t/H9M
CreateSemaphoreW
tablelayout
SYSTEM
object.item.audioItem
DTBFill<C:0x%s,P:%d,S:%d>
t$`H;
GetDIBits
<button contentalign="focusrect" background="themeable(dtb(EXPLORER::LISTVIEW, 1, 6), Highlight)"/>
D26CGITPtr::Get
SetProcessWorkingSetSizeEx
xmllite.dll
.tls$
@8s(u
SubtractRect
.xe%S,mh
<element accessible="true" accrole="statictext" accname="resstr(163)" layoutpos="top" id="atom(active_media_item_duration)" resid="active_media_item_duration" contentalign="topright" background="argb(0,0,0,0)"/>
HKEY_USERS
object.item.videoItem.videoBroadcast
Circular
T$8A;
SysTreeView32
D$4HcD
u"A9v
s M9&t
L9\$(t&
@VWATAVAWH
F\'6V
.xdata
<iflesser custom="30">
IsVertical
0A__^[]
.gfids
'uXE3
!\$(H
.t]Gl
Stopped
_%6]+
T$`E;
IC{]/j
%-153L
Outline
Q_vRY&
<WMPDMCButtonHC content="sgraphic(346,2)"/>
Solid
]PfE9
IntersectClipRect
<CCHScrollBar layoutpos="ninebottom" accessible="true" accdesc="resstr(532)" accname="resstr(531)"/>
%s+%c
<WMPDMCThumbHC content="sgraphic(364,2)"/>
t$$E3
RoActivateInstance
Operating System
<WMPDMCElementHC layout="flowlayout(0)" height="25rp" width="53rp" resid="next_glyph_resource" id="atom(next_glyph_resource)" sheet="AVTEffects" background="argb(0,0,0,0)"/>
DkM0d
NativeHWNDHost
TypeLib
SHGetPropertyStoreForWindow
f;D$(
M9't1
NoSyncFocus
@.didat
GetDoubleClickTime
D;t$0
mizt]
GetModuleHandleExW
H9+uED
dVnDH` bh
Custom
I;C8v
f9l$0
[k&n^
doublelist
<no symbol info>
@$9A t
4M 5M
_cexit
\$,E3
{]]]t
aPTPTSSTT9-=>:)
syhVB
<CCVScrollBar layoutpos="nineright" accessible="true" padding="rect(1rp,0rp,0rp,0rp)" accdesc="resstr(534)" accname="resstr(533)"/>
AsNeeded
WMPDMC_MESSAGE_RETRIEVE_DEVICE_INFO
ColorFontPaletteIndex
t`9\$8u
EventData
<element accessible="true" accrole="statictext" layoutpos="right" accname="resstr(163)" id="atom(inactive_media_item_duration)" resid="inactive_media_item_duration" contentalign="middleright" background="argb(0,0,0,0)" padding="rect(2rp,0rp,4rp,0rp)"/>
7'pP.St2,v
valueWithHighContrastFallback
|e=5<
point
CCCommandLink
t%D8i
pA_A^A\_^[]
GetMonitorInfoW
UVWAUAVH
M9~Pt
fB9<ru
empty_text
I;@HwZA
D9/v H
mousewithin
xA_A^_^[]
eY6FJI
TouchSwitch_TrackChild
t$ WATAUAVAWH
u%@8r(u
LinkIndicatorsToContent
GetLastError
@USVWATAUAVAWH
UWAWH
K f99t
_commode
D;g,|
TrackingID
Failed parsing stylesheets
FindGadgetFromPoint
_amsg_exit
(|$@I
6b@R}
EqualRect
MFCreateStreamOnMFByteStream
A9~Xt
oXH9_`u
f9<qu
p WATAUAVAWH
A_A]A\_]
?terminate@@YAXXZ
Rounded
(|$pL
_snwscanf_s
m+$bW
<dependency>
|$ UAVAWH
Transitioning
element
<WMPDMCButtonHC borderthickness="rect(2rp,0rp,0rp,0rp)" background="sgraphic(305,7)"/>
0123456789ABCDEF
ZoomOptional
9sxthL
X.bwY
fD94Gu
gtc(%[^,]s
WM_TIMER
repeat_glyph_resource
PLAY_PAUSE_BUTTON
F0D8`b
uXD;w@t"
A_A]A\
hy}mq*
WindowsCompareStringOrdinal
Flags
GetRegionData
pA_A^A]A\_^]
DUIXMLParserFailure (parse state %i): %s '%s' (%s) @ line %d col %d
FirstItemOffset
L$Hu4H
SymFromAddr
9/v.H
9ZC{(
</style>
accessiblebutton
D8~$u
bottom
name="Microsoft.Windows.Common-Controls"
EL$(H
DrawFrameControl
GetPropW
|$XL9}
BackgroundOwnerID
MFGetSystemTime
NoMediaPresent
A_A^A]A\]
A_A^A]_]
)t$pH
uV@8~bt
SszsI
Column
D$0D+D$(
24>@s
Center
Visited
}k6YdG
D9uHu
u]8\$4
InvalidateLayeredDescendants
`.rdata
<wmpdmcslider id="atom(seek_bar)" enabled="false" resid="seek_bar" layoutpos="client" accessible="true" accname="resstr(162)" minimum="0" maximum="100" page="5" proportional="true" IsStatusBarStyle="true" JumpToClick="true" accrole="slider" background="argb(0,0,0,0)" sheet="SeekScrollBar"/>
+D$ +D$8
T$@D+
uS_tZ
D$@H;
RegQueryInfoKeyW
DropDescription
D9>v,A
RegCloseKey
46ja+
Framewidth
RegisterScaleChangeNotifications
9\$4v{
9t$`t7H
O0;KL
|$ UATAUAVAWH
U8@8~
Nm,s7
XA^A]_^[]
HcT$p
<WMPDMCButtonHC content="sgraphic(336,2)"/>
PasswordCharacter
ScaleFactor
flowlayout
failureReason
D$8fD
D!uHH;
IaFmmsmmGaI
ultra_light
PE Information
| Image Base | Entry Point | Reported Checksum | Actual Checksum | Minimum OS Version | PDB Path | Compile Time | Import Hash | Icon | Icon Exact Hash | Icon Similarity Hash | Icon DHash |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 0x140000000 | 0x000df770 | 0x00183039 | 0x00183039 | 10.0 | WMPDMC.pdb | 1983-02-21 15:33:49 | e9ef175e927e5e27a3e372e1e76d0a34 |  |
d5a4f3cf83ab9d47088cb953ee4213b2 | fc644506ae3a0fdd81719525b3a37c5a | c8dcdcbcfc6c7010 |
Version Infos
| CompanyName | Microsoft Corporation |
|---|---|
| FileDescription | Cast to Device |
| FileVersion | 10.0.17763.1 (WinBuild.160101.0800) |
| InternalName | WMPDMC |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | WMPDMC.exe |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 10.0.17763.1 |
| Translation | 0x0409 0x04b0 |
Sections
| Name | RAW Address | Virtual Address | Virtual Size | Size of Raw Data | Characteristics | Entropy |
|---|---|---|---|---|---|---|
| .text | 0x00000400 | 0x00001000 | 0x000e0f4a | 0x000e1000 | IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ | 6.42 |
| .rdata | 0x000e1400 | 0x000e2000 | 0x000357a0 | 0x00035800 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 4.69 |
| .data | 0x00116c00 | 0x00118000 | 0x00003d70 | 0x00001800 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 1.05 |
| .pdata | 0x00118400 | 0x0011c000 | 0x00008a6c | 0x00008c00 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 5.90 |
| .didat | 0x00121000 | 0x00125000 | 0x00000098 | 0x00000200 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE | 1.07 |
| .rsrc | 0x00121200 | 0x00126000 | 0x00050178 | 0x00050200 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ | 7.06 |
| .reloc | 0x00171400 | 0x00177000 | 0x000053cc | 0x00005400 | IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ | 5.44 |
| Name | Offset | Size | Language | Sub-language | Entropy | File type |
|---|---|---|---|---|---|---|
| IMAGE | 0x00165300 | 0x000002c0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.64 | None |
| IMAGE | 0x001655c0 | 0x00001338 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.90 | None |
| IMAGE | 0x00161bf8 | 0x00000266 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.52 | None |
| IMAGE | 0x00161e60 | 0x00000f9c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.86 | None |
| IMAGE | 0x00162e00 | 0x00000278 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.54 | None |
| IMAGE | 0x00163078 | 0x00001522 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.91 | None |
| IMAGE | 0x001645a0 | 0x000002bc | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.65 | None |
| IMAGE | 0x00164860 | 0x00000a9e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.77 | None |
| IMAGE | 0x0014f750 | 0x000001ea | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.82 | None |
| IMAGE | 0x0014f590 | 0x000001ba | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.70 | None |
| IMAGE | 0x00160898 | 0x0000024e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.43 | None |
| IMAGE | 0x00160658 | 0x0000023e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.35 | None |
| IMAGE | 0x001508e8 | 0x00000170 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.00 | None |
| IMAGE | 0x00150a58 | 0x0000017a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.08 | None |
| IMAGE | 0x00150bd8 | 0x00000546 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.44 | None |
| IMAGE | 0x00151120 | 0x0000054a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.46 | None |
| IMAGE | 0x00151670 | 0x000000f6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.05 | None |
| IMAGE | 0x00151768 | 0x0000026e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.51 | None |
| IMAGE | 0x001519d8 | 0x000002a0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.69 | None |
| IMAGE | 0x00151c78 | 0x000001f8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.93 | None |
| IMAGE | 0x00151e70 | 0x000001f6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.82 | None |
| IMAGE | 0x00152068 | 0x00001616 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.91 | None |
| IMAGE | 0x00153680 | 0x000016e4 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.92 | None |
| IMAGE | 0x00154d68 | 0x000015ea | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.92 | None |
| IMAGE | 0x00156358 | 0x00000636 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.55 | None |
| IMAGE | 0x00156990 | 0x000002be | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.72 | None |
| IMAGE | 0x00156c50 | 0x000002ee | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.74 | None |
| IMAGE | 0x00156f40 | 0x00000904 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.73 | None |
| IMAGE | 0x00157848 | 0x00000910 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.76 | None |
| IMAGE | 0x00158158 | 0x0000088e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.73 | None |
| IMAGE | 0x001589e8 | 0x000002b0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.71 | None |
| IMAGE | 0x00158c98 | 0x000002d8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.58 | None |
| IMAGE | 0x00158f70 | 0x00000910 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.76 | None |
| IMAGE | 0x00159880 | 0x0000091a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.76 | None |
| IMAGE | 0x0015a1a0 | 0x0000087e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.72 | None |
| IMAGE | 0x0015b260 | 0x0000020c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.00 | None |
| IMAGE | 0x0015b470 | 0x0000055e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.49 | None |
| IMAGE | 0x0015b9d0 | 0x000002e4 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.68 | None |
| IMAGE | 0x0015bcb8 | 0x0000036a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.07 | None |
| IMAGE | 0x0015c028 | 0x0000031a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.92 | None |
| IMAGE | 0x0015c348 | 0x000002de | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.69 | None |
| IMAGE | 0x0015c628 | 0x000005f6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.55 | None |
| IMAGE | 0x0015cc20 | 0x00000604 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.49 | None |
| IMAGE | 0x0015d228 | 0x00000172 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.88 | None |
| IMAGE | 0x0015d510 | 0x000005fa | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.53 | None |
| IMAGE | 0x0015d3a0 | 0x00000170 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.96 | None |
| IMAGE | 0x0015db10 | 0x000007c0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.70 | None |
| IMAGE | 0x0015e2d0 | 0x000007b6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.69 | None |
| IMAGE | 0x0015ea88 | 0x000007b0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.69 | None |
| IMAGE | 0x0015f238 | 0x000007a6 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.68 | None |
| IMAGE | 0x0014fb50 | 0x00000d96 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.82 | None |
| IMAGE | 0x0014fa28 | 0x00000122 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.93 | None |
| IMAGE | 0x0015f9e0 | 0x000000f0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.96 | None |
| IMAGE | 0x0015fad0 | 0x0000025a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.47 | None |
| IMAGE | 0x0015fd30 | 0x00000248 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.42 | None |
| IMAGE | 0x0015ff78 | 0x0000017e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.17 | None |
| IMAGE | 0x001600f8 | 0x0000025c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.43 | None |
| IMAGE | 0x00160358 | 0x0000011a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.91 | None |
| IMAGE | 0x00160478 | 0x000001e0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.80 | None |
| IMAGE | 0x0014f940 | 0x000000e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.73 | None |
| IMAGE | 0x0015aa20 | 0x00000554 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.45 | None |
| IMAGE | 0x0015af78 | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.68 | None |
| IMAGE | 0x00160ae8 | 0x00000428 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.22 | None |
| IMAGE | 0x00160f10 | 0x0000015c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.75 | None |
| IMAGE | 0x00161070 | 0x0000025a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.46 | None |
| IMAGE | 0x001612d0 | 0x00000300 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.91 | None |
| IMAGE | 0x001615d0 | 0x00000314 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.93 | None |
| IMAGE | 0x001618e8 | 0x0000030c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.90 | None |
| IMAGE | 0x001668f8 | 0x000001ce | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.80 | None |
| IMAGE | 0x00166ac8 | 0x000001ce | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.73 | None |
| IMAGE | 0x00166c98 | 0x0000025c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.50 | None |
| IMAGE | 0x00167160 | 0x0000042a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.23 | None |
| IMAGE | 0x00167590 | 0x00000448 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.30 | None |
| IMAGE | 0x00166ef8 | 0x00000268 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.52 | None |
| IMAGE | 0x00167e80 | 0x0000015c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.81 | None |
| IMAGE | 0x00167fe0 | 0x00000156 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.78 | None |
| IMAGE | 0x00168948 | 0x00000180 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.04 | None |
| IMAGE | 0x00168ac8 | 0x00000184 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.14 | None |
| IMAGE | 0x00168c50 | 0x000001be | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.57 | None |
| IMAGE | 0x00168e10 | 0x000001b2 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.41 | None |
| IMAGE | 0x00168fc8 | 0x00000212 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.97 | None |
| IMAGE | 0x001691e0 | 0x0000020e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.89 | None |
| IMAGE | 0x001693f0 | 0x00000270 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.48 | None |
| IMAGE | 0x00169660 | 0x00000270 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.49 | None |
| IMAGE | 0x001698d0 | 0x00000230 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.35 | None |
| IMAGE | 0x00169b00 | 0x0000022a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.06 | None |
| IMAGE | 0x00169d30 | 0x00000178 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.08 | None |
| IMAGE | 0x00169ea8 | 0x00000184 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.13 | None |
| IMAGE | 0x0016a030 | 0x00000204 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.02 | None |
| IMAGE | 0x0016a238 | 0x0000020c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.08 | None |
| IMAGE | 0x0016a448 | 0x00000284 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.52 | None |
| IMAGE | 0x0016a6d0 | 0x0000027e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.51 | None |
| IMAGE | 0x0016a950 | 0x00000270 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.54 | None |
| IMAGE | 0x0016abc0 | 0x00000258 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.40 | None |
| IMAGE | 0x0016ae18 | 0x0000013c | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.36 | None |
| IMAGE | 0x0016af58 | 0x0000013e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.48 | None |
| IMAGE | 0x0016b098 | 0x000001aa | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.52 | None |
| IMAGE | 0x0016b248 | 0x000001aa | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.48 | None |
| IMAGE | 0x0016b3f8 | 0x00000106 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.43 | None |
| IMAGE | 0x0016b500 | 0x00000108 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.39 | None |
| IMAGE | 0x0016b608 | 0x00000108 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.39 | None |
| IMAGE | 0x0016b710 | 0x00000106 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.43 | None |
| IMAGE | 0x0016b818 | 0x00000140 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.34 | None |
| IMAGE | 0x0016b958 | 0x00000144 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.42 | None |
| IMAGE | 0x0016baa0 | 0x000001b0 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.59 | None |
| IMAGE | 0x0016bc50 | 0x000001b2 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.54 | None |
| IMAGE | 0x0016be08 | 0x00000100 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.24 | None |
| IMAGE | 0x0016bf08 | 0x00000100 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.37 | None |
| IMAGE | 0x001679d8 | 0x00000258 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.48 | None |
| IMAGE | 0x00167c30 | 0x00000250 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.44 | None |
| IMAGE | 0x0016c008 | 0x000008dc | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.66 | None |
| IMAGE | 0x0016c8e8 | 0x000006b2 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.42 | None |
| IMAGE | 0x0016cfa0 | 0x0000020e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.18 | None |
| IMAGE | 0x0016d1b0 | 0x00000214 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.10 | None |
| IMAGE | 0x00168138 | 0x00000200 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.01 | None |
| IMAGE | 0x00168338 | 0x000001e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.90 | None |
| IMAGE | 0x00168520 | 0x00000214 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.18 | None |
| IMAGE | 0x00168738 | 0x0000020e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 6.12 | None |
| MUI | 0x00176060 | 0x00000118 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 2.97 | None |
| UIFILE | 0x0016d3c8 | 0x00008249 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.28 | None |
| UIFILE | 0x00175618 | 0x00000a41 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.25 | None |
| WEVT_TEMPLATE | 0x001282b8 | 0x0000142a | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.73 | None |
| RT_ICON | 0x00129a70 | 0x00000668 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.06 | None |
| RT_ICON | 0x0012a0d8 | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.40 | None |
| RT_ICON | 0x0012a3c0 | 0x000001e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.30 | None |
| RT_ICON | 0x0012a5a8 | 0x00000128 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.22 | None |
| RT_ICON | 0x0012a6d0 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.00 | None |
| RT_ICON | 0x0012b578 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.07 | None |
| RT_ICON | 0x0012be20 | 0x000006c8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.90 | None |
| RT_ICON | 0x0012c4e8 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.37 | None |
| RT_ICON | 0x0012ca50 | 0x0000946e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.98 | None |
| RT_ICON | 0x00135ec0 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.47 | None |
| RT_ICON | 0x00138468 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.69 | None |
| RT_ICON | 0x00139510 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.83 | None |
| RT_ICON | 0x00139e98 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.70 | None |
| RT_ICON | 0x0013a3c0 | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.78 | None |
| RT_ICON | 0x0013a6a8 | 0x000001e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.58 | None |
| RT_ICON | 0x0013a890 | 0x000001a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.39 | None |
| RT_ICON | 0x0013aa38 | 0x00000128 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.22 | None |
| RT_ICON | 0x0013ab60 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.05 | None |
| RT_ICON | 0x0013b408 | 0x000006c8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.83 | None |
| RT_ICON | 0x0013bad0 | 0x00000608 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.19 | None |
| RT_ICON | 0x0013c0d8 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.37 | None |
| RT_ICON | 0x0013c640 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.95 | None |
| RT_ICON | 0x0013d6e8 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.93 | None |
| RT_ICON | 0x0013e070 | 0x000006b8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.87 | None |
| RT_ICON | 0x0013e728 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.70 | None |
| RT_ICON | 0x0013ec40 | 0x00000668 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.06 | None |
| RT_ICON | 0x0013f2a8 | 0x000002e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.40 | None |
| RT_ICON | 0x0013f590 | 0x000001e8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.30 | None |
| RT_ICON | 0x0013f778 | 0x00000128 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.22 | None |
| RT_ICON | 0x0013f8a0 | 0x00000ea8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.00 | None |
| RT_ICON | 0x00140748 | 0x000008a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 5.07 | None |
| RT_ICON | 0x00140ff0 | 0x000006c8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.90 | None |
| RT_ICON | 0x001416b8 | 0x00000568 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.37 | None |
| RT_ICON | 0x00141c20 | 0x0000946e | LANG_ENGLISH | SUBLANG_ENGLISH_US | 7.98 | None |
| RT_ICON | 0x0014b090 | 0x000025a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.47 | None |
| RT_ICON | 0x0014d638 | 0x000010a8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.69 | None |
| RT_ICON | 0x0014e6e0 | 0x00000988 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.83 | None |
| RT_ICON | 0x0014f068 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.70 | None |
| RT_GROUP_ICON | 0x0013a300 | 0x000000bc | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.07 | None |
| RT_GROUP_ICON | 0x0013eb90 | 0x000000ae | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.09 | None |
| RT_GROUP_ICON | 0x0014f4d0 | 0x000000bc | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.16 | None |
| RT_VERSION | 0x001296e8 | 0x00000384 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 3.43 | None |
| RT_MANIFEST | 0x00128000 | 0x000002b3 | LANG_ENGLISH | SUBLANG_ENGLISH_US | 4.92 | None |
Imports
| Name | Address |
|---|---|
| EventWriteTransfer | 0x1400f9740 |
| TraceMessage | 0x1400f9748 |
| RegCloseKey | 0x1400f9750 |
| RegOpenKeyExW | 0x1400f9758 |
| RegQueryValueExW | 0x1400f9760 |
| RegCreateKeyExW | 0x1400f9768 |
| RegSetValueExW | 0x1400f9770 |
| EventRegister | 0x1400f9778 |
| EventUnregister | 0x1400f9780 |
| GetTraceLoggerHandle | 0x1400f9788 |
| GetTraceEnableLevel | 0x1400f9790 |
| GetTraceEnableFlags | 0x1400f9798 |
| RegisterTraceGuidsW | 0x1400f97a0 |
| UnregisterTraceGuids | 0x1400f97a8 |
| RegQueryInfoKeyW | 0x1400f97b0 |
| RegEnumKeyExW | 0x1400f97b8 |
| RegDeleteValueW | 0x1400f97c0 |
| TraceEvent | 0x1400f97c8 |
| Name | Address |
|---|---|
| GetPixel | 0x1400f97d8 |
| DeleteEnhMetaFile | 0x1400f97e0 |
| CreateRectRgn | 0x1400f97e8 |
| GetClipRgn | 0x1400f97f0 |
| IntersectClipRect | 0x1400f97f8 |
| SelectClipRgn | 0x1400f9800 |
| GetLayout | 0x1400f9808 |
| SetTextAlign | 0x1400f9810 |
| GetTextAlign | 0x1400f9818 |
| GetCurrentObject | 0x1400f9820 |
| SetTextColor | 0x1400f9828 |
| SetBkColor | 0x1400f9830 |
| SetBkMode | 0x1400f9838 |
| PatBlt | 0x1400f9840 |
| StretchDIBits | 0x1400f9848 |
| GetStockObject | 0x1400f9850 |
| SetDCBrushColor | 0x1400f9858 |
| CreateSolidBrush | 0x1400f9860 |
| SetStretchBltMode | 0x1400f9868 |
| PlayEnhMetaFile | 0x1400f9870 |
| GdiGradientFill | 0x1400f9878 |
| ExtTextOutW | 0x1400f9880 |
| GetTextColor | 0x1400f9888 |
| GdiTransparentBlt | 0x1400f9890 |
| SetPixel | 0x1400f9898 |
| CreatePatternBrush | 0x1400f98a0 |
| GetTextExtentPoint32W | 0x1400f98a8 |
| CreateHalftonePalette | 0x1400f98b0 |
| SelectPalette | 0x1400f98b8 |
| RealizePalette | 0x1400f98c0 |
| GetBrushOrgEx | 0x1400f98c8 |
| SetBrushOrgEx | 0x1400f98d0 |
| GetDIBits | 0x1400f98d8 |
| GetBkMode | 0x1400f98e0 |
| OffsetWindowOrgEx | 0x1400f98e8 |
| SetWindowOrgEx | 0x1400f98f0 |
| RectVisible | 0x1400f98f8 |
| GetRegionData | 0x1400f9900 |
| ExtCreateRegion | 0x1400f9908 |
| CombineRgn | 0x1400f9910 |
| OffsetRgn | 0x1400f9918 |
| GetRgnBox | 0x1400f9920 |
| CreateFontIndirectW | 0x1400f9928 |
| CreateDIBPatternBrushPt | 0x1400f9930 |
| SetLayout | 0x1400f9938 |
| LPtoDP | 0x1400f9940 |
| GetBkColor | 0x1400f9948 |
| GetTextMetricsW | 0x1400f9950 |
| GetDCBrushColor | 0x1400f9958 |
| GetTextExtentPointW | 0x1400f9960 |
| StretchBlt | 0x1400f9968 |
| CreateBitmap | 0x1400f9970 |
| CreateCompatibleBitmap | 0x1400f9978 |
| GetDeviceCaps | 0x1400f9980 |
| DeleteObject | 0x1400f9988 |
| GetObjectW | 0x1400f9990 |
| CreateCompatibleDC | 0x1400f9998 |
| CreateDIBSection | 0x1400f99a0 |
| SelectObject | 0x1400f99a8 |
| BitBlt | 0x1400f99b0 |
| GdiAlphaBlend | 0x1400f99b8 |
| DeleteDC | 0x1400f99c0 |
| CreatePen | 0x1400f99c8 |
| Polyline | 0x1400f99d0 |
| Name | Address |
|---|---|
| _purecall | 0x1400fa4f0 |
| __C_specific_handler | 0x1400fa4f8 |
| malloc | 0x1400fa500 |
| free | 0x1400fa508 |
| memcpy_s | 0x1400fa510 |
| memmove_s | 0x1400fa518 |
| calloc | 0x1400fa520 |
| _vscwprintf | 0x1400fa528 |
| vswprintf_s | 0x1400fa530 |
| wcsncpy_s | 0x1400fa538 |
| _vsnwprintf | 0x1400fa540 |
| iswspace | 0x1400fa548 |
| iswdigit | 0x1400fa550 |
| wcspbrk | 0x1400fa558 |
| iswalpha | 0x1400fa560 |
| wcschr | 0x1400fa568 |
| wcsstr | 0x1400fa570 |
| wcsspn | 0x1400fa578 |
| _wcsnicmp | 0x1400fa580 |
| _wtol | 0x1400fa588 |
| wcsncmp | 0x1400fa590 |
| _wcstoui64 | 0x1400fa598 |
| _wcsicmp | 0x1400fa5a0 |
| wcstol | 0x1400fa5a8 |
| _wcsdup | 0x1400fa5b0 |
| qsort | 0x1400fa5b8 |
| wcstok_s | 0x1400fa5c0 |
| _vsnprintf | 0x1400fa5c8 |
| _isnan | 0x1400fa5d0 |
| _snwscanf_s | 0x1400fa5d8 |
| _wtof | 0x1400fa5e0 |
| iswalnum | 0x1400fa5e8 |
| swprintf_s | 0x1400fa5f0 |
| strncpy_s | 0x1400fa5f8 |
| strnlen | 0x1400fa600 |
| _callnewh | 0x1400fa608 |
| _XcptFilter | 0x1400fa610 |
| _amsg_exit | 0x1400fa618 |
| __wgetmainargs | 0x1400fa620 |
| __set_app_type | 0x1400fa628 |
| exit | 0x1400fa630 |
| _exit | 0x1400fa638 |
| _cexit | 0x1400fa640 |
| __setusermatherr | 0x1400fa648 |
| _initterm | 0x1400fa650 |
| sqrt | 0x1400fa658 |
| sin | 0x1400fa660 |
| powf | 0x1400fa668 |
| memset | 0x1400fa670 |
| _wcmdln | 0x1400fa678 |
| _fmode | 0x1400fa680 |
| _commode | 0x1400fa688 |
| ?terminate@@YAXXZ | 0x1400fa690 |
| _lock | 0x1400fa698 |
| _unlock | 0x1400fa6a0 |
| __dllonexit | 0x1400fa6a8 |
| _onexit | 0x1400fa6b0 |
| ??1type_info@@UEAA@XZ | 0x1400fa6b8 |
| _errno | 0x1400fa6c0 |
| realloc | 0x1400fa6c8 |
| memmove | 0x1400fa6d0 |
| memcpy | 0x1400fa6d8 |
| memcmp | 0x1400fa6e0 |
| floorf | 0x1400fa6e8 |
| floor | 0x1400fa6f0 |
| expf | 0x1400fa6f8 |
| cosf | 0x1400fa700 |
| ceilf | 0x1400fa708 |
| _CxxThrowException | 0x1400fa710 |
| __CxxFrameHandler3 | 0x1400fa718 |
| wcscmp | 0x1400fa720 |
| Name | Address |
|---|---|
| RtlCaptureContext | 0x1400fa730 |
| RtlVirtualUnwind | 0x1400fa738 |
| RtlLookupFunctionEntry | 0x1400fa740 |
| Name | Address |
|---|---|
| SafeArrayGetVartype | 0x1400f9df8 |
| SafeArrayGetDim | 0x1400f9e00 |
| SafeArrayUnaccessData | 0x1400f9e08 |
| SafeArrayAccessData | 0x1400f9e10 |
| SafeArrayGetUBound | 0x1400f9e18 |
| SafeArrayGetLBound | 0x1400f9e20 |
| SafeArrayGetElement | 0x1400f9e28 |
| SysFreeString | 0x1400f9e30 |
| VariantClear | 0x1400f9e38 |
| SysAllocString | 0x1400f9e40 |
| VariantInit | 0x1400f9e48 |
| SysStringLen | 0x1400f9e50 |
| VariantCopy | 0x1400f9e58 |
| SysStringByteLen | 0x1400f9e60 |
| SysAllocStringByteLen | 0x1400f9e68 |
| SysAllocStringLen | 0x1400f9e70 |
| SafeArrayCreate | 0x1400f9e78 |
| SafeArrayPutElement | 0x1400f9e80 |
| SafeArrayDestroy | 0x1400f9e88 |
| VarUI4FromStr | 0x1400f9e90 |
| SafeArrayCreateVector | 0x1400f9e98 |
| VarBstrCmp | 0x1400f9ea0 |
| Name | Address |
|---|---|
| CoGetApartmentType | 0x1400fa750 |
| CoWaitForMultipleHandles | 0x1400fa758 |
| CoCreateInstance | 0x1400fa760 |
| CoTaskMemAlloc | 0x1400fa768 |
| PropVariantClear | 0x1400fa770 |
| CoInitializeEx | 0x1400fa778 |
| CoUninitialize | 0x1400fa780 |
| CoDisconnectObject | 0x1400fa788 |
| RegisterDragDrop | 0x1400fa790 |
| CoTaskMemFree | 0x1400fa798 |
| StringFromGUID2 | 0x1400fa7a0 |
| CoCreateGuid | 0x1400fa7a8 |
| ReleaseStgMedium | 0x1400fa7b0 |
| OleUninitialize | 0x1400fa7b8 |
| OleInitialize | 0x1400fa7c0 |
| CoTaskMemRealloc | 0x1400fa7c8 |
| CreateStreamOnHGlobal | 0x1400fa7d0 |
| RevokeDragDrop | 0x1400fa7d8 |
| CLSIDFromString | 0x1400fa7e0 |
| Name | Address |
|---|---|
| GdipDeleteGraphics | 0x1400fa448 |
| GdipDisposeImageAttributes | 0x1400fa450 |
| GdipCreateBitmapFromHBITMAP | 0x1400fa458 |
| GdiplusStartup | 0x1400fa460 |
| GdiplusShutdown | 0x1400fa468 |
| GdipCreateHBITMAPFromBitmap | 0x1400fa470 |
| GdipDrawImageRectRectI | 0x1400fa478 |
| GdipSetImageAttributesWrapMode | 0x1400fa480 |
| GdipCreateImageAttributes | 0x1400fa488 |
| GdipSetInterpolationMode | 0x1400fa490 |
| GdipGetImageGraphicsContext | 0x1400fa498 |
| GdipCreateBitmapFromScan0 | 0x1400fa4a0 |
| GdipGetImageHeight | 0x1400fa4a8 |
| GdipGetImageWidth | 0x1400fa4b0 |
| GdipDisposeImage | 0x1400fa4b8 |
| GdipCloneImage | 0x1400fa4c0 |
| GdipAlloc | 0x1400fa4c8 |
| GdipFree | 0x1400fa4d0 |
| GdipCreateBitmapFromStream | 0x1400fa4d8 |
| GdipCreateBitmapFromHICON | 0x1400fa4e0 |
| Name | Address |
|---|---|
| GetThemeAnimationTransform | 0x1400fa2b8 |
| BeginBufferedPaint | 0x1400fa2c0 |
| GetBufferedPaintBits | 0x1400fa2c8 |
| BufferedPaintClear | 0x1400fa2d0 |
| EndBufferedPaint | 0x1400fa2d8 |
| DrawThemeTextEx | 0x1400fa2e8 |
| GetThemePartSize | 0x1400fa2f0 |
| GetThemeAppProperties | 0x1400fa2f8 |
| GetThemeMetric | 0x1400fa300 |
| GetThemeColor | 0x1400fa308 |
| GetThemeFont | 0x1400fa310 |
| GetThemeMargins | 0x1400fa318 |
| OpenThemeData | 0x1400fa320 |
| CloseThemeData | 0x1400fa328 |
| BufferedPaintInit | 0x1400fa330 |
| BufferedPaintUnInit | 0x1400fa338 |
| GetThemeAnimationProperty | 0x1400fa340 |
| GetThemeBackgroundExtent | 0x1400fa348 |
| IsAppThemed | 0x1400fa350 |
| Name | Address |
|---|---|
| RoActivateInstance | 0x1400fa398 |
| RoGetActivationFactory | 0x1400fa3a0 |
| Name | Address |
|---|---|
| WindowsCreateStringReference | 0x1400fa3b0 |
| WindowsCreateString | 0x1400fa3b8 |
| WindowsGetStringRawBuffer | 0x1400fa3c0 |
| WindowsGetStringLen | 0x1400fa3c8 |
| WindowsDeleteString | 0x1400fa3d0 |
| WindowsCompareStringOrdinal | 0x1400fa3d8 |
| WindowsDuplicateString | 0x1400fa3e0 |
| WindowsIsStringEmpty | 0x1400fa3e8 |
| Name | Address |
|---|---|
| RoTransformError | 0x1400fa380 |
| RoOriginateError | 0x1400fa388 |
| Name | Address |
|---|---|
| PathCchAppend | 0x1400fa370 |
| Name | Address |
|---|---|
| ObjectFromLresult | 0x1400f9dc8 |
| CreateStdAccessibleObject | 0x1400f9dd0 |
| LresultFromObject | 0x1400f9dd8 |
| AccessibleObjectFromWindow | 0x1400f9de0 |
| GetRoleTextW | 0x1400f9de8 |
| Name | Address |
|---|---|
| DwmRenderGesture | 0x1400fa428 |
| DwmTetherContact | 0x1400fa430 |
| DwmIsCompositionEnabled | 0x1400fa438 |
| Name | Address |
|---|---|
| WICCreateImagingFactory_Proxy | 0x1400fa360 |
| Name | Address |
|---|---|
| RevokeScaleChangeNotifications | 0x1400fa3f8 |
| RegisterScaleChangeNotifications | 0x1400fa400 |
| GetScaleFactorForDevice | 0x1400fa408 |
| Name | Address |
|---|---|
| GetScaleFactorForMonitor | 0x1400fa418 |
Usage
Processing ( 11.46 seconds )
- 10.125 ProcessMemory
- 1.316 CAPE
- 0.007 AnalysisInfo
- 0.006 BehaviorAnalysis
- 0.001 Debug
Signatures ( 0.05 seconds )
- 0.008 ransomware_files
- 0.005 antianalysis_detectfile
- 0.005 antiav_detectreg
- 0.005 ransomware_extensions
- 0.003 ursnif_behavior
- 0.002 antiav_detectfile
- 0.002 infostealer_ftp
- 0.002 infostealer_im
- 0.002 poullight_files
- 0.002 territorial_disputes_sigs
- 0.001 antianalysis_detectreg
- 0.001 antivm_vbox_files
- 0.001 antivm_vbox_keys
- 0.001 geodo_banking_trojan
- 0.001 browser_security
- 0.001 disables_backups
- 0.001 disables_browser_warn
- 0.001 disables_power_options
- 0.001 azorult_mutexes
- 0.001 infostealer_bitcoin
- 0.001 cryptbot_files
- 0.001 echelon_files
- 0.001 infostealer_mail
- 0.001 masquerade_process_name
- 0.001 revil_mutexes
- 0.001 modirat_behavior
Reporting ( 0.01 seconds )
- 0.005 CAPASummary
- 0.001 JsonDump
Signatures
The PE file contains a PDB path
pdbpath: WMPDMC.pdb
SetUnhandledExceptionFilter detected (possible anti-debug)
The binary contains an unknown PE section name indicative of packing
unknown section: {'name': '.didat', 'raw_address': '0x00121000', 'virtual_address': '0x00125000', 'virtual_size': '0x00000098', 'size_of_data': '0x00000200', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE', 'characteristics_raw': '0xc0000040', 'entropy': '1.07'}
The binary likely contains encrypted or compressed data
section: {'name': '.rsrc', 'raw_address': '0x00121200', 'virtual_address': '0x00126000', 'virtual_size': '0x00050178', 'size_of_data': '0x00050200', 'characteristics': 'IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ', 'characteristics_raw': '0x40000040', 'entropy': '7.06'}
Yara detections observed in process dumps, payloads or dropped files
Hit: PID 1700 triggered the Yara rule 'shellcode_get_eip' with data '['{ E8 00 00 00 00 59 }']'
Anomalous binary characteristics
anomaly: Entrypoint of binary is located outside of any mapped sections
Screenshots
No screenshots available.Hosts
No hosts contacted.
DNS
No domains contacted.
Summary
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableUmpdBufferSizeCheck
Sorry! No behavior.
Sorry! No strace.
Sorry! No tracee.
No hosts contacted.
No TCP connections recorded.
No UDP connections recorded.
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP traffic
No SMTP traffic performed.
IRC traffic
No IRC requests performed.
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.
Sorry! No dropped files.
Sorry! No process dumps.
Sorry! No process dumps.